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I.  INTRODUCTION 


A.  BACKGROUND 

Future  systems  will  provide  the  pilot  with  information 
rather  than  raw  data.  This  information  will  probably  be 
presented  to  the  pilot  in  the  form  of  situation  reporting, 
presentation  of  the  options,  and  probabilities  connected 
with  various  courses  of  action  [Ref.  1:  p.  28].  James  A. 
Guffy,  unit  chief.  Advanced  AI  Technology  Concepts,  stated 
[Ref.  2:  p . 66 1 ; 

The  way  it  stands  now,  a  pilot  is  often  drowning  in 
data  out  is  starved  for  information.  That's  the  problem 
the  Pilot's  Associate  program  was  created  to 
address.  Its  role  is  to  Increase  the  pilot's  decision¬ 
making  capability  and  improve  mission  effectiveness. 

The  need  for  an  improved  decision-making  capability  is 

evident  from  aircraft  accident  statistics.  The  cause/factor 

elements  involved  in  aircraft  accidents  may  be  grouped  into 

three  general  categories: 

(  1  )  Environmental  extreme. 

(  2  )  Material  failure. 

(  3  )  Human  error. 

Environmental  extremes  are  usually  external  to  the 
cockpit  and  beyond  the  pilot's  control.  Material  failures 
are  hardware  malfunctions  and  structural  failures.  Human 
errors  are  procedural  and  judgmental  errors,  not  necessarily 
by  the  pilot.  Errors  on  the  part  of  the  designer  or  air 
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traffic  controller  are  certainly  human.  However,  pilot  error 
is  cited  most  often  [Ref  3:  p.13]. 

Human(pilot)  errors  can  be  partitioned  into  five 

categories  [Ref  4:  p.7]: 

(  1  )  Retroactive  Interference  -  The  action  of  the 

individual  is  not  identified  with  the  problem  at 
hand.  This  is  motivated  by  an  assimilation  of  prior 
input  into  an  ongoing  program. 

(  2  )  Reductive  Coding  -  An  overload  of  input  or  a  complex 
stages  of  events,  precludes  the  correct  handling  of 
the  situation. 

(  3  )  Psychological  Refractory  Phase  -  The  human  unit 
receives  the  input.  However,  a  simultaneous 

transference  of  this  information  does  not  occur. 
There  is  a  segment  of  time  between  the  input  and 
output,  leaving  a  window  open  to  information  loss  or 
personal  interpolation  of  an  event  or  incoming  data. 

(  4  )  Inferential  Shortcomings  -  Application  of  knowledge 
structures  and  heuristics  to  a  situation  for 
supposition  of  data  which  is  non-existent.  In  short 
human  error  due  to  assumption. 

(  5  )  Leadership  and  Crew  Coordination  -  Protocol  and  the 
social  hierarchy  of  the  aircraft  are  examined  in 
reference  to  their  role  in  the  cockpit  environment. 

A  single  element  or  a  combination  of  these  elements  could 

invoke  an  error. 

The  pilot  of  an  aircraft  is  tasked  with  monitoring  many 
gauges  in  the  cockpit.  A  system  such  as  the  one  proposed 
could  improve  pilot  effectiveness  to  some  degree  in  all  five 
categories  listed  above,  particularly  in  the  areas  of 
reductive  coding  and  Inferential  shortcomings .  The  system 
continuously  monitors  the  gauges  and  is  kept  abreast  of  the 
aircraft  systems  they  represent.  In  case  of  an  emergency, 
any  problem  that  is  presented  to  the  pilot  is  also  presented 
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to  the  system.  Recommended  actions  are  returned  to  the 
pilot,  by  the  system,  for  cross  reference  or  confirmation. 

B.  OBJECTIVE 

The  overall  objective  is  to  raise  to  a  higher  level  of 
abstraction  the  real-time  performance  data  available  to  the 

pilot,  utilizing  artificial  intelligence  techniques.  The 

objectives  in  particular  are  as  follows: 

(  1  )  Show  that  useful  information  can  be  provided  to  the 
pilot,  in  terms  of  procedural  recommendations  and 
diagnosis,  rapidly  with  the  existing  sensor  input. 

(  2  )  Quantify,  through  implementation,  the  amount  of 

information  processing  necessary  to  sufficiently 

define  the  aircraft  emergencies  [Ref  5:  p.23. 

(  3  )  Show  the  feasibility  of  a  system  with  multiple 

knowledge  bases. 

(  4  )  Show  that  means-ends  analysis  is  an  appropriate 

problem  solving  formalism  on  which  to  solve  the 
problem. 


C.  SCOPE 

This  system  is  implemented  around  the  United  States 
1 

Marine  Corps  AH-1T  helicopter.  It  demonstrates  the  ability 
of  this  problem  solving  paradigm  to  diagnose  compound 
aircraft  emergencies  and  present  recommendations  to  the 
pilot,  in  the  context  of  the  objectives  stated  above.  Twenty 
categories  of  inflight  emergencies,  for  the  AH-1T,  are 


1 

The  AH-lT  is  a  tandem  seat,  two  place  (pilot  and 
copilot/gunner)  twin  engine  attack  helicopter  manufactured 
by  Bell  Helicopter  Textron. 


10 


One  category,  engine 


1 

listed  in  the  NATOPS  Flight  Manual 
malfunctions,  is  concentrated  on. 


D.  ASSUMPTIONS 

Three  assumptions  have  been  made  to  simplify 

implementation : 

(  1  )  No  discrepancies  exist  between  the  gauges  and 
caution  lights.  Caution  lights  illuminate  to  show 
fault  conditions.  They  are  housed  together  in  a 
cluster  called  a  master  caution  panel.  It  is 
assumed  that  these  lights  are  not  faulty. 

(  2  )  All  indications  presented  to  the  pilot  are 

correct.  As  a  result  of  this,  no  emergency  is 
caused  by  a  faulty  gauge. 

(  3  )  The  aircraft  is  operating  in  the  high  altitude 
environment . 


E.  MATERIALS  AND  EQUIPMENT 

The  design  was  implemented  in  Turbo  Prolog  [Ref. 6  p.ll 
on  an  IBM  AT  computer. 


1 

The  NATOPS  Flight  Manual  is  issued  by  the  authority  of 
the  Chief  of  Naval  Operations  and  under  the  direction  of 
Commander,  Naval  Air  Systems  Command  in  conjunction  with  the 
Naval  Air  Training  and  Operating  Procedures  Standardization 
(NATOPS)  Program.  This  manual  standardizes  ground  and  flight 
procedures  based  on  professional  knowledge  and  experience. 
Compliance  with  this  manual  is  mandatory  except  where  stated 
within  the  manual. 
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I I .  SUMMARY  OF  CURRENT  KNOWLEDGE 


A.  INDUSTRY 

Substantial  emphasis  in  AI  developments  to  date  has 
remained  in  the  mi 1 itary/ industr ial  area. 

Accelerating  activity  in  artificial  intelligence  and 
expert  systems  is  pressing  researchers  to  take  a  long  look 
ahead  toward  real-world  applications  in  a  variety  of 
aerospace  systems,  where  the  technology  holds  promise  of 
enhancing  human  capabilities.  [Ref  2:  p.40] 

One  major  driver  is  the  funding  and  research  base 
provided  by  the  Defense  Advanced  Research  Projects  Agency's 
(DARPA)  Strategic  Computing  Initiative  and,  more 
specifically,  particular  areas  targeted  by  DARPA  for  initial 
technology  applications  [Ref. 7  p.  46J. 

1.  Pilot  Aids 

Development  of  the  Pilot's  Associate,  an 

intelligent,  personalized  airborne  system,  has  moved  ahead 

significantly  with  award  of  three-year  Phase  1  contracts  to 

two  industry  teams  headed  by  Lockheed-Georgia  Co.  and 

McDonnell  Aircraft  Co.  [Ref. 8  p.  341.  Initially,  it  will 

consist  of  four  interactive  expert  systems  [Ref. 4:  p . 4 7 ] : 

(  1  )  A  Situation  Assessment  Manager  to  assess  the 

external  environment  as  well  as  internal  resources. 

(  2  )  A  Tactical  Planning  Manager  to  recommend  optimum 
tactical  employment  of  the  aircraft,  given  mission 
objectives  and  restrictions. 

(  3  )  A  Mission  Planning  Manager  to  refine  and  redefine 
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mission  objectives,  given  current  situation, 
command,  and  intelligence  inputs. 

(  4  )  A  System  Status  Manager  to  monitor  and  diagnose 
total  system  health  and  current/projected  status 
of  all  on-board  systems. 

Texas  Instruments  research  included  development  of  an 
emergency  procedures  expert  system  (EPES),  focusing  on 
aiding  pilots  of  USAF/Generai  Dynamics  F-15  fighters  in 
certain  multiple  emergency  situations  [Ref. 3  p.89]. 

2 .  Maintenance  Expert  System 

McDonnell  Douglas  Aircraft  Corp.  has  conducted 
flight  tests  of  an  avionics  integrated  (AIMES)  maintenance 
expert  syscem  aboard  a  Navy/Mcdcnne 11  Douglas  F/A-18.  During 
operation,  AIMES  monitors  the  aircraft's  mission  computers 
for  avionics  failure  indications  and  records  general  data 
from  suspect  avionic  boxes.  The  expert  system  then  generates 
queries  based  upon  the  general  data.  Tests  are  performed  by 
the  system  to  determine  the  validity  of  the  queries  and  a 
conclusion  concerning  the  failure  is  reached.  During 
interrogation  the  system  can  provide  the  fault  data,  name 
the  avionics  card  that  has  failed,  and  detail  the  reasoning 
that  lead  to  the.  fault  isolation  conclusion  [Kef.  2  p.69]. 

2 .  Space  Station  Operations 

The  Boeing  Aerospace  Co.  is  addressing  expert 
systems  in  space  station  operations,  and  expert  systems  as 
pilot  decision  aids.  Expert  systems  development  for  the 
manned  space  station  is  focused  on  the  automation  of 
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housekeeping  functions,  one  of  which  is  electrical  power 
control,  with  emphasis  on  fault  detection  and  isolation  and 
energy  management.  The  system  is  optimized  for  diagnosing 
multiple  or  simultaneous  faults.  In  pilot  decision  aids, 
Boeing  is  applying  expert  systems  technology  to  the 
pictorial  format  cockpit  display  it  is  developing  for  the 
Air  Force  Systems  Command's  Aeronautical  Systems  Div.  The 
display  system,  called  the  crew  information  manager,  will 
use  picture  symbols  instead  of  numbers  to  present  real-time 
flight  and  mission  information  for  all-weather  operations  in 
a  variety  of  military  aircraft.  Boeing  expects  thac  work  on 
the  system  will  continue  under  OARPA's  Pilot's  Associate 
program  when  the  currant  contract  expires  [Ref. 2:  p.79]. 

B.  ACADEMIA 

Planners  are  but  one  of  many  types  of  expert  systems. 
The  expert  system  proposed  in  this  paper  is  of  the  planner 
type.  There  are  four  basic  approaches  to  planning: 
hierarchical ,  non-hierarchical ,  script-based ,  and 
opportunistic. 

1 .  Non^tiierarchical  Planners 

Hierarchical  is  interpreted  as  having  a  hierarchy  of 
representations  of  a  plan  in  which  the  highest  is  a 
simplification,  or  abstraction ,  of  the  plan  and  the  lowest 
is  a  detailed  plan,  sufficient  to  solve  the  problem.  A  non- 
hierarchical  planner  develops  a  sequence  of  problem-solving 
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actions  to  achieve  each  of  its  goals  and  usually  has  only 
one  representation  of  a  plan.  Some  examples  of  non- 
hierarchical  planners  are  STRIPS  [Ref. 10  p.523]  and  HACKER 
[Ref. 10  p.531].  HACKER  generates  initial  plans  that  violate 
ordering  constraints  and  then  tries  to  go  back  and  them. 
This  is  based  on  a  Linearity  assumption,  which  is  that 
subgoals  are  independent  and  thus  can  be  sequentially 
achieved  in  an  arbitrary  order.  The  Linearity  assumption  is 
used  in  cases  where  there  is  no  a  priori  reason  to  order  one 
operator  ahead  of  another  [Ref. 10:  p.  520].  This  assumption 
could  not  be  made  for  this  implementation.  The  actions  taken 
by  the  pilot  must  be  ordered  and  thus  the  recommendations  to 
the  pilot  by  the  system  must  be  ordered.  A  characteristic 
of  non-hierarchical  planners  is  the  inability  to  distinguish 
between  the  relative  importance  of  recommended  actions. 

Means-ends  analysis  is  often  used  in  non-hierarchical 
planners  [Ref. 10:  p.  517],  but  is  also  considered  by  many  to 
be  a  hierarchical  itself.  Means-ends  is  appropriate  when  it 
is  known  how  each  problem-solving  operator  changes  the  state 
of  the  world  and  knows  the  preconditions  for  an  operator  to 
be  executed  [Ref. 10:  p.  524].  Operators  or  actions  are 
selected  according  to  their  ability  to  reduce  the  observed 
difference  between  the  current  state  and  the  goal  state. 
[Ref. 5:  p.147]. 

.  .  .  to  select  these  operators,  means-ends  analysis  must 
be  provided  with  a  table  listing  the  best  operator  for 
classes  of  states.  These  tables  refer  to  the  difference 
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between  the  current  state  and  the  goal  state,  and  are  thus 
called  difference  tables . 

Difference  tables  provide  a  way  of  decomposing  a  hard 
problem  into  simpler  sub-problems  recursively,  thus  making 
means-ends  a  recursive  search.  Means-ends  analysis  is  also 
called  hierarchical  reasoning.  [Ref. 11:  p.  11.1] 

2 .  Hierarchical  Planners 

Hierarchical  planners  utilize  a  hierarchy  of 
representations  of  a  plan  and  are  designed  to  solve  some  of 
the  problems  with  nonhierarchical  planners.  Examples  are 
NOAH  [Ref. 10  p.541],  MOLGEN,  [Ref. 10  p.551]  and  ABSTRIPS 
[Ref. 10  p.5231 .  First  a  plan  is  sketched  out.  The  initial 
3ketch,  even  though  complete,  is  usually  vague.  Those  parts 
that  are  vague  are  refined  into  more  detailed  sub-plans 
until  finally  the  plan  has  been  refined  to  a  complete 
sequence  of  detailed  problem-solving  operators.  The  major 
advantage  to  this  is  that  it  provides  a  means  of  ignoring 
the  details  that  obscure  or  complicate  a  problem  (Ref. 10  p. 
517].  Because  these  planners  are  able  to  represent  a  problem 
at  different  levels  of  abstraction,  they  tend  to  be  very 
elaborate  but  effective  planning  models. 

3 .  Scr ipt-Based  Planners 

The  script-based  method  utilizes  stored  plans  which 
contain  the  outlines  for  solving  different  kinds  of  problems 
over  a  range  of  classes.  One  of  the  MOLGEN  systems  was 
implemented  in  this  manner.  First  a  skeleton  plan  is  found 
that  is  applicable  to  the  given  problem.  Then  the  abstract 
steps  in  the  plan  are  filled  in  with  problem-solving 
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operators  from  the  particular  problem  context.  If  this  can 
be  done  for  each  abstracted  step,  then  the  plan  as  a  whole 
will  be  successful  (Ref. 10:  p.  518].  Operators  are  not 

ordered  until  constraints  are  available  to  guide  ordering. 
This  eliminates  premature  commitment  that  could  cause  a 
conflict  with  other  parts  of  the  plan.  Scripts  are  not  well 
suited  to  diagnosis  of  compound  emergencies  because  all 
scripts  can't  be  anticipated  and  thus  pre-written. 

4 .  Opportunistic  Planners 

Opportunistic  planners  are  different  from  those 
discussed  thus  far.  Operators,  or  steps  in  the  plan  are 
introduced  whenever  the  opportunity  arises.  This  contrasts 
greatly  witn  she  least  commitment  strategies  in  NOAH  ana 
MOLGEN.  Another  characteristic  of  these  planners  is 
multidirectionality.  Planning  takes  place  on  several  levels 
simultaneously. 

CRYSALIS  is  an  example  of  an  opportunistic  planner. 
It  uses  a  blackboard  type  data-structure  to  represent  the 
complex  control  structure  of  human  planning.  This  involves 
having  a  number  of  specialist  programs  that  produce 
hypothesis  about  data  posted  on  the  blackboard.  These 
hypotheses  are  available  to  all  other  specialists. 

The  blackboard  is  divided  into  planes.  Planes  are 
organized  to  reflect  characteristic  processes  in  planning. 
The  five  categories  of  planes  are  (a)  the  plan  plane  which 
is  the  actual  plan  or  executive  decisions;  (b)  the  meta-plan 
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plane  contains  information  on  the  general  approach,  such  as 
designating  means-ends  or  some  other  approach;  (c)  the  plan 
abstraction  plane  which  contains  desirable  actions  in 
general,  and  controls  the  plan  plane;  (d)  the  knowledge-base 
plane  which  contains  world  or  external  knowledge;  and  (e) 
the  executive  plane  schedules  the  planning  decisions  made  by 
the  blackboard  {Ref. 10:  p.  25]. 

The  disadvantage  of  this  method  is  that  it  is  more 
likely  to  rewrite  parts  or  its  plan  or  change  its  goals  than 
is  a  hierarchical  planner.  This  taxes  up  valuable  time  vnen 
dealing  with  real-time  constraints. 
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III.  CONCEPT  OF  THE  PLANNER 


This  planner  is  passive  taking  no  action  on  its  own.  Its 
recommendat ions  to  the  pilot  would  appear  on  a  digital 
display  on  the  instrument  panel.  This  system  could  be  a 
replacement  for,  or  supplement  to,  the  master  caution  panel. 

The  planner  is  autonomous  in  detecting  its  own  goals 
based  on  the  current  state  description,  rather  than  simply 
having  the  goals  handed  to  it.  The  system  initializes  the 
goals  to  the  empty  list,  and  checks  the  gauges  and  caution 
lights  for  the  initial  establishment  of  goals.  Any 

fluctuations,  increases  or  decreases  in  component  status , 
require  a  response. 

A  means-end  control  structure  does  several  things: 

(  1  )  Means-ends  analysis  attempts  to  reduce  the 

difference  between  the  current  state  and  the  goal 

state . 

(  2  )  Subgoals  are  created  via  problem  reduction. 

(  3  )  Planning  is  incorporated  by  deferring  actions  until 
after  the  overall  solution  path  is  established. 

A.  KERNEL 

The  means-ends  control  structure  was  written,  in  prolog, 
by  Dr.  Neil  C.  Rowe  [Ref. 11  p.11.3] .  This  control 

structure,  and  the  process  of  goal  acquision,  make  up  the 
The  kernel  of  the  planner.  Once  the  goals  have  been  acquired 
and  resolved,  the  facts,  in  a  knowledge-base  set  along  with 
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means-ends-analysis,  are  used  to  satisfy  these  goals.  As 
with  most  expert  systems,  the  size  of  the  kernel  is  small  in 
comparison  to  the  facts  in  the  knowledge-base. 

B.  KNOWLEDGE-BASE  SETS 

The  planner  consists  of  multiple  knowledge-base  sets 
that  enable  it  to  efficiently  satisfy  goals  and  to 
appropriately  respond  to  different  requirements  in  different 
flight  regimes.  A  knowledge-base  set  consists  of: 

(  1  )  Recommended  operators  for  achieving  goals. 

(  2  )  The  preconditions  for  the  usage  of  operators. 

(  3  )  The  effects ( postconditions)  on  the  state 
description  as  a  result  of  the  application  of 
operators . 

The  partitioning  of  the  knowledge-base  is  critical  to 
both  efficiency  and  correctness.  What's  recommended  for  a 
goal  in  a  high  altitude  environment  could  be  different  from 
that  in  a  low  altitude  environment.  As  a  result,  different 
knowledge-base  sets  are  required. 

The  concept  of  multiple  knowledge-base  sets  is  very 
similar  to  an  air  traffic  controllers'  handling  of  aircraft 
in  different  control  sectors.  Once  the  aircraft  leaves  a 
given  knowledge-base  set's  domain,  a  different  knowledge-base 
set  is  asserted. 

A  response  to  an  emergency  in  a  helicopter  is  in  many 
cases  predicated  on  the  aircraft's  altitude  and  airspeed. 
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Domains  defined  in  terms  of  altitude  or  airspeed  can  be  made 
active  when  the  aircraft  enters  its  domain. 

Although  this  system  requires  multiple  knowledge-base 
sets,  only  one  is  implemented.  Only  the  knowledge-base  would 
need  to  be  changed  to  adapt  it  to  another  aircraft. 
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IV.  IMPLEMENTATION  OF  THE  PLANNER 


This  chapter  describes  what  techniques  were  used  to 
construct  the  planner  and  why  this  particular  implementation 
was  chosen. 

A.  PROGRAMMING  LANGUAGE 

Lisp  is  the  most  widely  used  programming  language  in 

artificial  intelligence  today.  However,  Prolog,  a  relatively 

newer  language,  is  gaining  in  popularity. 

Prolog  has  three  positive  features  that  give  it  key 
advantages  over  Lisp.  First,  Prolog  in  syntax  and 
semantics  is  much  closer  to  formal  logic.  The  programs  are 
better  understood  and  better  maintained.  Second,  Prolog 
provides  automatic  backtracking,  a  feature  that  simplifies 
the  writing  of  search  routines .  Third,  Prolog  allows  a 
procedure  definition  to  be  used  for  many  different  kinds 
of  reasoning  by  allowing  the  designated  input  and  output 
parameters  to  vary  from  call  to  call.  [Ref. 11:  preface] 

The  availability  of  a  Prolog  compiler  for  the  IBM  AT  was 
a  very  important  factor  in  this  implementation.  The  run  time 
required  to  provide  the  recommended  operators  for  a 
prescribed  goal  was  of  great  interest.  Turbo  Prolog  is  one 
of  the  fastest  of  the  implementations  developed  for  the  IBM 
AT  and  compatibles  [Ref. 12:  p.  2541. 

B .  APPROACH 

First,  it  is  necessary  to  discuss  the  data  types  and 
symbols  used  in  the  program. 
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The  caution  panel  cluster  is  represented  by  symbols  each 
corresponding  to  a  single  caution  light  or  segment  in  the 
cluster.  A  list  of  these  segments  is  a  segment_list .  These 
segments  are  shown  in  Figure  4.1. 


segment 


engl_oil _press 
engl_chi p_detr 
engl_£uel_£ liter 
dc_gen_l 
xmsn_chi p_detr 
temp_press_90 
chip_detr_90 
xmsn_oil_h ot 
c_box_oi l_press 
hyd _press_l 
hyd_tamp_l 
ac_main 
engl_gov_man 
fire_l _pull 
zpm_rotor_low 
rpm_ngl 
xmsn_oil_byp 


eng2_oil _press 
eng2_chip_detr 
eng2_£ uel_£ il ter 
dc_gen_2 
c_box_chip_det r 
temp _press_42 
chip_detr_42 
xmsn_oil _press 
c_box_oil_hot 
hyd _press_2 
hyd_temp_2 
ac_stby 
eng2_gov_man 
£i re_2 _pull 
r pm_r o tor _h i g h 
zpm_ng2 


Figure  4.1  Segment  Symbols  Representing  Caution  Panel 

A  partial  state  description  of  the  aircraft  and  its 
environment  at  any  given  time  is  defined  in  terms  of 
state_elements .  A  list  of  state  elements  is  a  state_l  ist . 
State  elements  are  shown  in  Figure  4.2 
1 .  Goal  Acquisition 

The  problem  solver  has  access  to  the  instruments 
and  caution  lights  and  evaluates  them  in  terms  of  their 
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status,  i.e.  high,  low,  erratic  etc.  Any  changes  in  status 
are  flagged  as  requiring  a  response .  The  aircraft's 
instruments  are  referred  to  as  components.  However,  a 
component  is  defined  as  being  any  of  the  symbols  listed  in 
Figure  4.3. 


state_element  = 

landing_zone ( zone_quality) 
automatic (component ) 
idle ( component ) 
decrease ( component ) 
hot ( component ) 
engaged ( component ) 

£ ire ( component ) 
airspeed (knots ) 
oat ( component_status ) 
oil_bypassing_cooler 
left_yaw  £uel_obstruction ( component ) 

power (component _status )  fuel _press (component_status ) 
ammeter ( component , component_status ) 
revs(  component ,  component_status ) 
oil __press(  component ,  component_status) 
oi l_temp(  component,  component_stat us  ) 
torque (  component,  component_stat us  ) 
prepar e_f or_fa i 1 ur e ( component ) 
ltt (component, component_status ) 


full ( component ) 
metal _particles (component ) 
manual ( component ) 
normal (component ) 

Sailed ( component ) 
on (component ) 
off ( component ) 
gross_weight ( wt_class ) 
altit ude( ft) 
land( type_landing ) 


Figure  4.2  State  Elements 

The  goals  are  generated  by  scanning  each  caution 
light  segment  in  the  master  caution  panel  and  each 
instrument,  as  seen  by  the  pilot.  For  each  caution  light 
there  is  a  set  of  goals.  Prior  to  assertion,  the  goals  are 
checked  against  all  the  other  goals  asserted  previously. 
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Duplicates,  and  goals  which  are  subordinate  to  previous 
goals  (in  its  class),  are  not  retained.  Classes  o£  goals  are 
defined  by  priority  sets  which  list  explicitly  the  relative 
priority  of  each  goal  in  a  given  class.  If  a  goal  of  a 
higher  priority  has  been  asserted,  no  lower  priority  goals 
will  be  asserted.  Figure  4.4  shows  an  example  of  the 
relative  priority  between  power  status  values.  In  most  cases 
a  specific  goal  belongs  to  only  one  class  or  (set).  The 
majority  of  the  priority  sets  contain  only  one  goal. 


component  = 


anal 
c_box 
gen  2 

master_caution 

seas 

fuel2 

throttle2 

oil_temp_42 

g ear_box_42 

xmsn_oil_temp 

hyd_sys_2 

hyd_temp_2 

ng2 

nfl 

power 


anq2 

anq_oil _prass 
g  ovl 

master_arm 

fuel 

fuel _press 
oil_temp_90 
oil _press_42 
c_box_oi l_temp 
xmsn_oll _pr ess 
hyd _press 
rotor 
i  tt_l 
nf  2 

main  inverter 


xmsn 

genl 

g  ov2 

ecu 

fu  ell 

throttlel 

oil _press_90 

gear_box_90 

c_box_oil _press 

hyd_sys_l 

hyd_temp_l 

ngl 

it  t_2 

rain_rmv 

standby_inverter 


Figure  4.3  Aircraft  Component  Symbols 


A  component 
component_status .  One 


is  described  in  terms 
or  more  of  eight 


of 


its 
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possible  status 


values  may  apply  to  a  given  component.  The  goals  generated 
by  the  planner  must  be  free  of  conflicts.  A  possible 
conflict  exists,  for  a  given  component,  when  two  or  more 
status  values  are  true  at  the  same  time.  These  status  values 
are  prioritized  by  facts  in  the  knowledge  base  via  a 
prioritized  status_2ist,  which  is  a  list  of  component  status 
symbols.  Component  status  values  are  shown  in  Figure  4.4. 


component_status  = 

none  high  low 

increase  decrease  ok 
erratic  respond 

or ior ity_set ( ( power ( none ) ,  power ( low) , 

power (decrease ) ,  power ( increase ) ] ) . 


Figure  4.4  Component  Status  Values 

At  the  highest  level  of  abstraction,  the  goals  passed 
to  means-ends  are  merely  to  respond  to  a  given  gauge.  The 
state_list  is  then  searched  for  the  specific  status  of  the 
component.  The  respond  status  is  slightly  different  from  the 
other  quantifying  and  mutually  exclusive  status  labels  such 
as  low,  high  etc.  For  a  given  component,  the  status  respond 
can  co-exist  with  a  high  or  low  component  status  in  the 
current  state  description. 
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2 .  Organizing  the  Search 


The  order  in  which  goals  are  selected  from  a  goal 
list  to  be  satisfied  is  driven  by  the  order  of  the 
recommended  facts.  The  most  important  goals  are  placed 
first.  If  there  is  more  than  one  recommended  operator  that 
applies  to  a  given  goal  then  those  operators  are  ordered 
according  to  the  urgency  of  the  operator.  An  example  of  such 
recommended  facts  are  shown  in  Figure  4.5. 

Recommended  facts  with  multiple  goals  should  have  the 
goal  that  is  least  likely  to  be  satisfied  first  in  its  goal 
list.  Search  time  can  be  reduced  by  explicitly  including 
predicted  response  groups  into  the  recommended  structure.  An 
example  of  this  is  the  con£irm_dual_eng_£ailure  operator. 


recommended (  State,  [revs (ngl, respond ), 

revs(ng2, respond) ,  o££(g enl), 

o££(gen2),  off(engl),  o££(eng2 ), 

land ( pr act ) J ,  con £irm_dual_eng_£ai lure) . 

recommended(  State ,  [torque (engl ,  respond)], 
con£ irm_n£l_£ailure ) . 

recommended (  State,  [ torque ( engl,  respond)] 
check_ngl_over speed ) . 

recommended (  State ,  [ torque (engl,  respond)] 
check_ngl_underspeed) . 


Figure  4.5  Recommended  Facts 
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Grouping  multiple  goals  in  one  recommendation 
reduces  the  number  of  times  a  given  operator  is  invoked 
unnecessarily.  However,  this  should  not  be  a  substitute  for 
the  single  goal  recommended  facts.  Single  goal  recommended 
facts  are  the  finest  granularity  of  the  search  process. 

The  output  of  this  planner  is  to  present  the 
operators  to  the  pilot  as  recommendations  to  satisfy  an 
immediate  goal.  A  list  of  these  operators  are  referred  to  as 
an  op_list.  Operators  are  shown  in  Figure  4.6. 


operator  = 

n  orma  l_appr  oa  ch 

slope_land in g 

steep_approach 

high_speed_approach 

max_we i gh t_land in g 

sliding_landing 

pract_landing 

pract_landing_outrankedl 

pract_landing_outranked2 

pos_landingl 

pos_landlng2 

pos_landing_outranked 

autorotation 

check_ngl_overspeed 

check_ngl_underspeed 

check_ng2_overspeed 

check_ng2_underspeed 

genl_o££ 

gen2_off 


ma  s t e r _a r m_o f f 

con£irm_dual_eng_failure 

con  £ i rm_engl_£a i 1 ur  e 

conf i rm_eng2_£a i 1 ur e 

engage_scas 

ecu_of f 

rain_rmv_of f 

govl_to_manual 

gov2_to_manual 

govl_to_a u  t  oma tic 

go v2_t o_a u  t  oma  tic 

confirm_n£l_£a i 1 ur e 

conf irm_n£2_£ai lure 

throttle l_idle 

throttle2_idle 

check_genl_£a i 1 ur e 

check_gen2_£a i 1 ur e 

engl_o££ 

eng2_of f 


Figure  4.6  Recommended  Operators 
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There  are  nine  different  landing  profiles  and 
emergencies.  A  landing  as  a  result  of  a  malfunction  could  be 
described  as  land  as  soon  as  practical,  soon  as  possible,  or 
a  landing  via  autorotation.  With  the  exception  of  an 
autorotation,  landings  are  a  function  of  aircraft  wt_class 
or  landing  zone_qual ity.  Landing  profiles  and  classes  are 
shown  in  Figure  4.7. 


w t_class  = 

heavy  ;  moderate 

zone_quality  = 

clear  ;  confined  ;  slope 


type_! and lag  = 

pract;  pos;  auto; 
normal;  high_speed ;  slope; 
sliding;  max_weight;  steep 

pr lor 1 ty_set ( [land (pos),  land (pract) I ) . 


Figure  4.7  Landing  Profiles 

3 .  Natops  to  Code  Translation 

The  NATOPS  manual  together  with  the  experience  of 
the  author  played  the  role  of  the  expert  for  this  system.  It 
was  necessary  to  translate  the  procedures  and  system 
information  contained  in  the  NATOPS  manual  into  a  knowledge¬ 
base.  Examples  of  this  translation  are  now  discussed.  In 


29 


each  example  the  indications  and  corrective  action  are  taken 
from  the  NATOPS  manual. 

The  first  example,  shown  in  Figure  4.8  describes  the 
initial  action  required  by  the  pilot  in  the  case  of  a  chip 


Caution  and  warning  light  -  INITIAL  ACTIGN 

Panel  wording:  CHIP  DETR 

Condition :  metal  particles  in  engine 

Corrective  Action:  Flight  idle.  Check  oil  pressure  and 
temperature.  If  normal  operate  at  reduce  power . 
If  pressure  is  low  and/or  temperature  is  high, 
shut  down  respective  engine.  Land  as  soon  as 
practical . 

This  information  is  coded  as  follows... 

caution_light(  State,  engl_chip_detr  ) : - 
member (metal _particles (engl ) ,  State  ), 
write(  "  Caution  light:  engl_chip_detr  "  ),nl , 
secondary ( State ,  engl_chip_detr ) . 

secondaryf State,  engl_chip_detr )  :- 

member (oil _pr ess ( engl,  X  ),  State  ), 
below_limit(L) ,  status _member (X,L) , 
create_goals ( [  off (engl), land (pract) ]  ). 

secondaryf State ,  engl_chip_detr )  :- 

member ( oil_temp( engl,  high).  State  ), 
create_goals ( [  off (engl ), land ( pract ) )  ). 

secondaryf State,  engl_chip_detr )  :- 

create_goals ( l  idle ( throttlel ), land ( pract ) )  ). 


Figure  4.8  Translation  Example  I 
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detector  caution  light.  By  assumption,  caution  lights  and 
instruments  do  not  need  to  be  cross  checked.  In  this  example 
there  is  more  than  one  course  of  action.  Depending  on  the 
status  of  the  oil  pressure  and  temperature,  (secondary 
indications),  different  goals  are  asserted.  The  goals  that 
are  created  are  thus  a  function  of  the  primary ( caution 
light)  and  secondary  indications.  The  predicate  create_goals 
conditionally  asserts  the  goals  that  are  its  arguments  based 
on  goal  priority  and  duplication. 

Figure  4.9  shows  the  translation  of  a  definition  of 
a  power  turbine  governor  failure  into  code.  If  the  immediate 
goal  is  to  respond  to  the  torque  of  the  #1  engine  then  it 
would  be  recommended  to  check  the  #1  nf  governor.  If  a 
precondition  to  some  operator  is  that  the  01  governor  be  in 
a  failed  state,  and  this  has  yet  to  be  proven,  then  the 
second  recommended  fact  would  be  used. 

The  indications  of  a  01  nf  governor  failure  are 
represented  by  the  preconditions  listed  in  Figure  4.9.  If 
the  preconditions  are  true  then  nothing  will  be  deleted  from 
the  current  state  description  because  nothing  has  changed. 
Only  a  diagnosis  of  the  situation  has  been  accomplished. 
Nothing  has  been  done  about  it  at  this  point.  The  current 
state  description  is  amended  to  reflect  the  fact  that  the 
governor  has  failed  and  the  instruments  listed  in  the 
addpostcondition  fact  have  been  responded  to. 
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Power  Turbine  Governor  (NF)  Failure 


Indications . 

1.  Erratic  GAS  PROD  RPM  (Ng). 

2.  Erratic  INLET  TEMP. 

3.  Fluctuating  ENG  RPM  (Nf ) . 

4.  abrupt  increase  in  ENG  RPM  (Nf)  above 
governed  value. 

5.  Abrupt  decrease  in  ENG  RPM  (Nf)  below 
governed  value. 

6.  Fluctuating  TORQUE. 

Procedure . 

1.  Affected  engine  -  IDENTIFY 

2.  Throttle  -  ENGINE  IDLE. 

3.  GOV  -  MANUAL 

4.  Throttle  -  ADVANCE. 

5.  LAND  AS  SOON  AS  PRACTICAL. 

This  information  is  coded  as  follows... 

recon wiendedf  State,  [ torque (engl , respond ) J, 
conf izm_nfl_fai lure ) . 

recommended (  State,  ( failed ( govl ) 1 , 
conf irm_n£l_£a i lure) . 

precondition (  State,  con firm_nfl_fai lure , 

[ revs (ngl, erratic) ,  itt( engl, erratic) , 
revs (nfl, erratic) ,  torque ( engl, erratic) , 
automatic (govl ) ] ) 

deletepostcondition (  State, 

confirm_n£l_failure, [ ] ) . 

addpostconditlon (  conf irm_nfl_fai lure, 

(revs ( ngl , respond ) ,  revs (nfl, respond ) , 
failed ( govl ) , torque ( engl, respond ) ) ) . 


Figure  4.9  Translation  Example  II 
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The  third  example,  a  single  engine  failure,  is  shown 
in  Figure  4.10.  When  an  engine  failure  occurs  the  rotor 
speed  decreases  somewhat  due  to  loss  of  power.  This  creates 
the  goal  zevsizotoz ,  respond).  One  of  the  recommended 
operators  for  this  goal  is  conf lzm_enql_£ailuze .  If  all  of 
the  preconditions  have  been  meet,  the  current  state 
description  will  be  altered  by  che  addition  and  deletion  of 
facts  as  shown. 
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Single  Engine  Failure  (In  Flight). 

When  one  engine  fails,  rotor  speed  can  be  expected 
to  droop.  The  desired  rotor  rpm  can  be  regained  if 
sufficient  power  is  available,  by  using  the  engine 
RPM  switcn.  After  rpm  is  regained  by  use  of  the  RPM 
switch,  desired  rotor  rpm  can  be  maintained  by  the 
collective  control. 

INDICATIONS . 

1.  Left  yaw 

2.  RPM  caution  lignt  (gas  producer) 

3.  MASTER  CAUTION  light 

4.  Rotor  rpm  decrease 

5.  Engine  instruments  decrease 

{  engine_instruments  } 

6.  CAUTION  panel  lights 

This  information  is  coded  as  follows... 
recommended (  State, 

[revs (rotor, respond) J,  conf irm_engl_fai lure ) . 

precondition (  State,  confirm_engl_failure/ 

[ torque (engl, none ) ,  torque (xmsn, low) , 
revs (ngl , none ) ,  revs (nfl, none ) , 
oil __press  (engl,  none  ) ,  £ailed(genl ) , 
i tt (engl , none ) ,  le£t_yaw,  on( £uell) , 

£u 11 ( throttlel ) ,  revs ( rotor , low) ) ) . 

deletepostcondi tion (  State ,  con£ irm_engl_£ailure , 
[ on ( ecu ) J  ) . 

add postcondition (  con£irm_engl_£ailure/ 

[  off (ecu ) , tailed (engl) , revs (ngl, respond ) , 
revs ( nfl, respond ) ,revs( rotor , respond) , 
ltt( engl, respond ) , torque (engl, respond ) , 
torque ( xmsn, respond ) ) ) . 


Figure  4.10  Translation  Example  III 
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V.  ANALYSIS  AND  CONCLUSIONS 


A.  ANALYSIS 

A  version  of  the  planner  was  tested  to  determine  the 
execution  time  of  the  various  test  cases.  Only  the 
intermediate  write  statements,  included  in  the  source  code 
in  appendix  D,  were  left  out.  These  times  are  interesting 
because  they  give  some  relative  measurement  to  the  costs  of 
the  various  aspects  of  the  planner.  The  response  times  for 
each  test  are  shown  in  Figure  5.1. 

Detailed  output  listings  of  tests  2,  3,  and  4,  can  be 

found  in  appendices  A,  B,  and  C  respectfully. 


TEST  # 

TIME 

EMERGENCY 

1 

0.39 

sec . 

none 

2 

1.82 

sec . 

dual  engine  failure 

3 

1.92 

sec . 

engine  01  failure 

A 

2.53 

sec . 

engine  01  failure  and 

02  Nf  governor  failure 

Figure  5.1  Test  Case  Response  Times 
1.  Test  1 

This  test  involved  no  goals.  It  did  provide  the 
amount  of  time  necessary  to  scan  the  current  state 
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description.  The  base  time  of  0.39  sec.  as  reflected  by  test 
#1  is  also  significant  because  this  determines  the  sampling 
rate  of  the  planner.  The  state  description  then  could  be 
sampled  approx.  150  times  per  minute.  The  longest  reaction 
time  is  experienced  when  a  component  failure  occurs 
immediately  after  a  sampling  of  the  current  state 
description.  This  means  as  much  as  0.8  sec.  could  elapse 
before  a  response  condition  would  be  acted  upon  by  the 
planner . 

2 .  Test  2 

In  test  #2  only  four  operators  are  considered  and 
all  four  were  applicable.  Figure  5.2  shows,  through 
indentation,  the  nesting  levels  for  each  operator  invoked. 
Backtracking  occurs  when  the  indentation  is  reversed, 
and  no  backtracking  occurs  in  this  example.  This  is  the 
optimum  situation.  Here  the  planner  is  telling  the  pilot 
that  it  has  confirmed  a  dual  engine  failure  and  an 
autorotation  is  to  be  accomplished. 

3.  Test  3. 

In  this  case,  11  operators  were  tried  with  5  being 
applicable.  Figure  5.2  depicts  the  backtracking  that  occurs 
as  a  result  of  some  recommended  operators  failing  to  satisfy 
immediate  goals.  It  should  be  pointed  out  that  two  of  the 
operators,  confirm_eng2_failure  and  check_gen2_failure,  were 
attempted  twice.  The  pilot  in  this  case  is  informed  that  the 
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TEST  #1 


-no  recommended  operators- 

TEST  12 

conf izra_dual  _ana_£a  i 2  ura 
czaci_landing_outzankadl 
pos_landina_ou£zankad 
autorotation 


TEST  1 3 

conf 1 r m_^ng 2 _ia i lure 
check _gen2_fai lure 
con£izzi_anql_£a  1 1  uza 
anql_o££ 
genl_o££ 

pzact_landing_oatzankedl 
?os_landing_out ranked 
aucorotation 
conf irm_eng2_f ai lure 
check_gen2_fai lure 
pos_landing 


TEST  #4 

conf irm_eng2_fai lure 
check_gen2_f a i lure 
conf izm_engl_£ai lure 
conf izm_n£2_£ailuze 
engl_o£ £ 
genl_of£ 

pract_landlng_outrankedl 
pos_landing_out ranked 
autorotation 
conf irm_eng2_£ai lure 
check_gen2_fai lure 
pos_2anding 


Figure  5.2  Recommended  Operator  Selection 
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to  secure  the  #1  engine  and  generator 


II  engine  has  tailed, 
and  to  land  as  soon  as  possible. 

4.  Test  4. 

Here  12  operators  were  selected  with  6  being 
applicable.  Again,  two  of  the  operators, 

con£izm_eng2_£ailuze  and  check_gen2_£ailuze ,  were  attempted 
twice.  In  addition  to  the  information  presented  to  the  pilot 
In  test  3,  the  pilot  is  informed  that  the  #2  nf-governor  has 
failed. 

Governor  failures  are  not  as  straightforward  to 
diagnose  as  engine  failures.  As  a  result  this  Information  is 
potentially  more  valuable. 

5.  Programming  language 

Turbo  Prolog  is  nor  considered  to  be  a  Clocksin  and 

Hellish  PROLOG  as  most  others  are  (Ref. 13  p.334).  The  first 

major  difference  between  Turbo  Prolog  and  other 
Implementations  is  the  required  use  of  Pascal-like  type 
definitions  for  parameters.  This  has  the  advantage  of 
catching  various  errors  at  compile  time,  and  also  allows  the 
compiler  to  generate  more  efficient  code.  The  drawback  is 
that  describing  generalized  procedures  can  sometimes  result 
in  multiple  definitions  of  a  rule  to  handle  different  types 
of  variables.  An  example  of  this  was  the  member  predicate. 
As  defined,  it  could  accept  as  arguments  a  state_element  and 
a  state_list.  However,  when  this  predicate  was  needed  to  be 
used  with  arguments  of  type  component_status  and  status_list 
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respectfully,  a  separate  definition  of  the  member  predicate 
had  to  be  defined  named  "status^ember** .  The  Pascal-like 
syntax  was  more  of  a  help  than  a  hindrance  and  greatly 
helped  in  the  debugging  process. 

B.  CONCLUSIONS 

Turbo  Prolog  proved  to  be  suitable  for  this  purpose  and 
the  timing  results  were  encouraging.  Useful  information  was 
rapidly  presented  in  the  form  of  diagnosis  and  recommended 
actions . 

Means-ends  proved  to  be  effective  because  the  structure 
of  the  task  was  well  suited  to  the  data  structure  or  the 
recommended  facts.  The  amount  of  information  processing 
required  to  satisfy  the  various  intermediate  goals  is 
reflected  by  the  number  of  recommended  operators  considered 
in  satisfying  the  immediate  goals.  All  of  the  facts  in  the 
knowledge-base  were  not  utilized  by  the  examples  exercised 
in  this  implementation. 

Translation  from  the  NATOPS  manual  into  a  knowledge-base 
was  straightforward  and  easily  verified.  In  employing 
multiple  knowledge-base  sets,  correctness  and  speed  of 
execution  can  be  maintained. 

It  is  conceivable  that  this  system  could  be  used  in 
place  of  the  existing  master  caution  panel  which  displays 
caution  light  information  only.  Perhaps  a  digital  display 
that  presents  graphically,  as  well  as  textually,  the 
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operators  and  actions  to  be  taken.  In  this  way  no  extra 
space  would  need  to  be  provided  for  this  system  in  the 
cockpit.  This  makes  this  feasible  for  use  in  existing 
aircraft . 

For  total  aircraft  system  implementation,  the  number  of 
operators  required  is  dependent  on  the  granularity  of 
information  provided  to  the  pilot.  Higher  levels  of 
abstraction  are  required  for  immediate  actions,  with  more 
detailed  instructions  provided  at  the  request  of  the  pilot. 
Different  help  levels  could  be  provided  by  switching  to  a 
specialized  knowledge-base.  This  implies  an  interactive 
capability  by  the  pilot  to  select  goals,  and  a  means  to  do 
so  would  need  to  be  provided. 

The  inflight  emergency  domain  requires  as  a  minimum  the 
following  domains:  Takeoff,  Low  altitude.  High  altitude. 
Night,  and  perhaps  instrument  conditions. 

This  system  potentially  lends  itself  to  practically  any 
application  within  the  aircraft.  The  task  of  piloting  an 
aircraft  is  very  well  defined  and  procedurized  and  could 
possibly  be  expanded  into  the  realm  of  normal  procedures  as 
well  as  emergency  procedures. 

C.  RECOMMENDATIONS 

It  is  recommended  that  a  full  implementation  be  built  to 
determine  the  number  of  knowledge-base  sets  needed  and  the 
scope  of  each. 
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APPENDIX  A 

DUAL  ENGINE  FAILURE  EXECUTION 


Caution 

Caution 

Caution 

Caution 

Caution 

Caution 

Caution 


light:  engl_oil_press 
light:  eng2_oil_press 
light:  dc_gen_l 
light:  dc_gen_2 
light:  r pm_rotor _low 
light:  rpm_ngl 
light:  rpm_ng2 


Goal  list  is:  ( revs ( ng2 , respond ) ,  revs ( ngl , respond ) , 
revs(rotor, respond) ,  o££(gen2),  o£f(genl),  o££(eng25, 
land(pract),  off (engl)] 


difference:  (revs(ng2rrespond) ,  revs ( ngl , respond ) , 
revs < rotor , respond ) ,  o£f(aen2),  otf(genl),  o££(eng2), 
land(pract),  off (engl)] 


*******************tt:?*:t*:*:t*:t*:t;t**:*:**;t*:t*:t*x:!:*:** 


current  operator:  conf irm_dual_eng_£ailure  depth  is:  1 

*********************************************** 


operator  preconditions  have  been  met 
items  being  deleted  are:  [on(ecu)) 

items  being  added  are:  [off(ecu),  failed (engl ) , 

failed ( eng2 ) ,  off(genl),  off(gen2)/  off(engl),  off(eng2), 
revs ( ngl, respond ) ,  revs ( nfl, respond ) ,  revs ( rotor , respond ) , 
itt (engl, respond ) ,  itt (eng2, respond ) ,  revs ( ng2, respond ) , 
revs ( nf 2 , respond ) ] 

Goal  list  is:  [revs(ng2, respond) ,  revs ( ngl, respond ) , 

revs ( rotor , respond ) ,  off(gen2),  off(genl),  off(eng2), 

land(pract),  off (engl)l 

difference:  ( land ( pract ) ] 
*********************************************** 

current  operator:  pract_landing_outrankedl  depth  is:  2 
*********************************************** 
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Goal  list  is:  tland(pos)! 
difference:  lland(pos)] 

*********************************************** 

current  operator:  pos_landing_outranked  depth  is:  3 
*********************************************** 

Goal  list  is:  [land(auto)] 
difference:  (land(auto)l 

*********************************************** 

current  operator:  autorotation  depth  is:  4 

operator  preconditions  have  been  met 

items  being  deleted  are:  { full ( throttle! ) ,  full ( throttle2 ) , 
airspeed ( 100 ) ,  alt  it ude (  1000 ) ,  revs ( rotor , respond ) 3 

items  being  added  are:  [ idle ( throttlel ) ,  idle { throttle2 ) , 
alrspeed(O),  altitude(O),  revs ( rotor , respond ), land (auto ) ] 

operator  preconditions  have  been  met 

items  being  deleted  are:  (] 

items  being  added  are:  lland(pos)] 

operator  preconditions  have  been  met 

items  being  deleted  are:  M 

items  being  added  are:  ( land ( pract ) ] 

operator  preconditions  have  been  met 

The  recommended  operators  are:  [conf irm_dual_eng_failure, 
autorotation,  pos_landing_out ranked, 

pract_landing_outrankedl ] 

The  final  state  description  is:  [ oil_press ( engl, none ) , 

oiljpress(eng2,none) ,  revs ( rotor , low) ,  of f ( rain_rmv) , 

of f (master_arm) ,  landing_zone(clear ) ,  full ( throttlel ) , 
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full  ( throttle2 ) , 
automat ic(gov2) , 
torque (engl, none ) , 
revs ( ngl, none ) , 
revs (nf 2, none ) , 
failed(genl) ,  fai 
oil_temp( c_box,ok ) 
oi l_press ( xmsn, ok ) 
fuel  jpress ( ok  )  , 
oil_press  ( hyd_sys_: 
airspeed ( 100 ) ,  alt 


of £ (master_caut ion) , 
on(fuell),  on(fuel2), 
torque (eng2, none ) , 
revs ( ng2 , none ) , 
oil_temp( engl, ok ) , 
led  ( gen2 ) ,  fulKfuel), 
,  oil_press (c_box,ok) , 
,  ammeter (genl, none ) , 
itt ( engl, none ) , 


automatic(govl ) 
normal ( £uel_press ) 
torque ( xmsn, low) 
revs ( nf 1, none ) 
oil_temp(eng2,ok ) 
off(scas),  on(ecu) 
oil  _temp( xmsn, ok ) 
ammeter  (gen2,none) 
itt ( eng2 , none ) 


l,ok ) , 

itude ( 1000  ) , 


oil_press ( hyd_sys_2, ok ) 
lef t_yaw] 


r 

r 

r 

r 

r 

r 


/ 

r 

r 
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APPENDIX  B 


SINGLE  ENGINE  FAILURE  EXECUTION 


Caution  light:  engl_oil_press 
Caution  light:  dc_gen_l 
Caution  light:  rpm_rotor_low 
Caution  light:  rpm_ngl 

Goal  list  is:  [ revs ( ngl, respond ) ,  revs ( rotor , respond ) , 

off(genl),  land(pract),  off(engl)J 

difference:  [revs(nglf respond) ,  revs ( rotor , respond ) , 

off(genl)7  land(pract),  off(engl)l 

*********************************************** 

current  operator:  conf irm_eng2_fa i lure  depth  is:  1 
*********************************************** 

Goal  list  is:  ( torque ( eng2, none ) ,  torque ( xmsn, low) , 

revs (ng2, none ) ,  revs ( nf 2, none ) ,  oil_press ( eng2 , none ) , 

failed ( gen2 ) ,  itt (eng27 none ) 7  left_yaw7  on(fuel2), 

full ( throttle2 ) ,  revs (rotor , low) ] 

difference:  ( torque ( eng2 , none ) ,  revs ( ng2 , none ) , 

revs ( nf 2, none ) ,  oil_press ( eng27 none ) ,  failed (gen2 ) , 

itt (eng27  none ) ] 

*********************************************** 

current  operator:  check_gen2_fa i lure  depth  is:  2 
*********************************************** 

Goal  list  is:  ( on (gen2 ) 7ammeter ( eng2, none ) ] 

difference:  l on ( gen2 ) , ammeter (eng27 none ) ] 
*********************************************** 

current  operator:  conf irm_engl_failure  depth  is:  1 

*********************************************** 

operator  preconditions  have  been  met 
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Items  being  deleted  are:  (on(ecu) ] 

items  being  added  are:  loff(ecu),  fai led ( engl ) , 

revs (ngl, respond ) ,  revs ( nfl, respond ) ,  revs ( rotor, respond ) , 
itt (engl , respond ) ,  torque (engl, respond ) , 

torque ( xmsn , respond ) 1 

Goal  list  is:  (revs ( ngl, respond ) ,  revs(rotor, respond), 

o££(genl),  land(pract),  o££(engl)) 

difference:  [off (genl) , land ( pract ) , off (engl) ] 

********************** a****************-?******* 

current  operator:  engl_o££  depth  is:  2 

*ir***'*3H«*'****flf**!»*'***3»at*»**«*5it**arst*itaES*»^t*at**** 

operator  preconditions  have  been  met 
items  being  deleted  are:  Con(engl)) 
items  being  added  are:  (of£(engl)] 

Goal  list  is:  { revs ( ngl, respond ) ,  revs < rotor , respond ) , 

off(genl),  land(pract),  o££(engl)j 

difference :  (off(genl), land ( pract ) ) 

*********************************************** 

current  operator:  genl_o££  depth  is:  3 
*********************************************** 

operator  preconditions  have  been  met 
items  being  deleted  are:  (on(genl)] 
items  being  added  are:  (off(genl)) 

Goal  list  is:  ( revs (ngl, respond ) ,  revs (rotor, respond) , 

o££(genl),  land(pract),  off(engl)) 

difference:  (land(pract) ) 
*********************************************** 

current  operator:  pract_landing_outrankedl  depth  is:  4 
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*********************************************** 

Goal  list  is:  (land(pos)l 
difference:  (land(pos)l 

*********************************************** 

current  operator:  pos_land  ing__outranked  depth  is:  5 
*********************************************** 

Goal  list  is:  [land(auto)] 

difference:  [land(auto)3 
*********************************************** 

current  operator:  autorotation  depth  is:  6 

is**:*********:*:**:*:*:*****:*;?*****-*******:********** 

Goal  list  is:  [ failed < engl ), failed ( eng2 ) ] 
difference:  [ f a i led ( enq2 ) ! 

x*******************:*:*********:*********:**:****** 

current  operator:  conf irm_eng2_failure  depth  is:  7 
*********************************************** 

Goal  list  is:  ( torque ( eng2 , none ) ,  torque ( xmsn, low) , 

revs ( ng2, none ) ,  revs ( nf 2, none  ) ,  oil_press (eng2,none ) , 

failed(gen2) ,  itt(eng27none) ,  left_yaw,  on(fuel2), 

f ull ( throttle2 ) ,  revs ( rotor , low) ] 

difference:  t torque ( eng2, none ) ,  revs ( ng2, none ) , 

revs ( nf 2 , none ) ,  oil_press (eng27none ) ,  failed(gen2 ) , 

itt ( eng2, none ) J 

*********************************************** 

current  operator:  check_gen2_failure  depth  is:  8 
*********************************************** 

Goal  list  is:  t on ( gen2 ) , ammeter ( eng2, none ) 1 
difference :  [ on ( gen 2 ) , ammeter ( eng 2, none ) ] 
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*********************************************** 


current  operator:  pos_landingl  depth  is:  5 
*********************************************** 

operator  preconditions  have  been  met 
items  being  deleted  are:  (altitude< 1000 ) /airspeed( 100) J 
items  being  added  are:  ( land(pos ), altitude ( 0 ) ,airspeed ( 0 ) ] 
operator  preconditions  have  been  met 
items  being  deleted  are:  {] 
items  being  added  are:  ( land(pract )  ] 
operator  preconditions  have  been  met 


The  recommended  operators  are:  ( con£irm_engl_£ailure 

engl_o£f,  genl_o£f,  pos_landingl,  pract_landing_outrankedl ) 


The  final  state  description  is:  (oil _press ( engl , none ) 
oil_press ( eng2, ok ) ,  revs ( rotor , low) ,  off (rain_rmv) 
of£(master_arm)/  land ing_zone (clear ) ,  full ( throttlel ) 
f ull ( throttle2 ) ,  off (master_caution ) ,  automatic < govl ) 
automat ic(gov2 ) ,  on(fuell),  on(fuel2)/  normal ( fuel jpress ) 
torque (engl, none ) ,  torque (eng2, ok ) ,  torque ( xrosn, low) 
revs (ngl, none ) ,  revs(ng2,ok),  revs(nfl/none)/  revs(nf2,ok) 
oil_temp(engl,ok ),  oil_temp(eng2, ok ) ,  failed(genl) 
fulKfuel),  o£f(scas),  on(ecu),  oil_temp(c_box,ok) 
oil_press(c_box/ok)/  oil_terap(xmsn/ ok ) ,  oil_press(xmsn,ok ) 
ammeter (genl, none ) ,  ammeter (gen2, ok ) ,  fueljpress(ok) 
itt (engl, none ) ,  itt (eng2, ok ) ,  oil_press ( hyd_sys_l, ok ) 
oil_press ( hyd_sys_2, ok ) ,  a irspeed ( 100 ) ,  altitude(1000) 
le£t_yawl 


/ 

/ 

/ 

/ 

/ 

/ 

/ 

/ 

/ 

/ 

/ 

/ 

/ 

/ 
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APPENDIX  C 


SINGLE  ENGINB  FAILURE  /  NF  GOVERNOR  FAILURE  EXECUTION 


revs(ng2,  erratic) 

revs(nf2,  erratic) 

torque(eng2,  erratic) 

torque (xmsn,  erratic) 

Caution  light:  engl_oil_press 
Caution  light:  dc_gen_l 
Caution  light:  rpm_rotor_low 
Caution  light:  rpm_ngl 

Goal  list  is:  I  revs ( ngl, respond ) ,  revs ( rotor , respond ) , 

off(genl),  land<pract),  off(engl),  torque( xmsn, respond ) , 
torque (eng2, respond 5 ,  revs < nf 2 , respond ) ,  revs ( ng2, respond ) 3 

difference:  { revs ( ngl, respond ) ,  revs ( rotor , respond ) , 

off(genl),  land(pract),  off(engl),  torque ( xmsn, respond ) , 
torque (eng2, respond),  revs ( nf 2, respond ) ,  re vs (ng2, respond ) ) 

*********************************************** 

current  operator:  conf irm_eng2_failure  depth  is:  1 

*********************************************** 

Goal  list  is:  ( torque(eng2,none ) ,  torque( xmsn, low) , 

revs ( ng2, none ) ,  revs(n£2,none) ,  oil_press(eng2,none ) , 

fai led{gen2 ) ,  itt(eng2,none) ,  le£t_yaw,  on(fuel2), 

full (throttle 2 ) ,  re vs (rotor, low) ) 

difference:  (torque(eng2,none),  revs ( ng2, none ) , 

revs ( n£2, none ) ,  oil_press (eng2, none ) ,  fai led ( gen2 ) , 

itt (eng2, none ) ) 

*********************************************** 

current  operator:  check_gen2_£ailure  depth  is:  2 
*********************************************** 

Goal  list  is:  (on(gen2) , ammeter (eng2, none) ) 
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di f f erence :  [ on( gen2 ) , ammeter ( eng2, none ) J 

*********************************************** 

current  operator:  conf irm_engl_fa i lure  depth  is:  1 

*********************************************** 

operator  preconditions  have  been  met 
items  being  deleted  are:  ion(ecu)] 

items  being  added  are:  [off (ecu),  failed(engl) , 

revs ( ngl , respond ) ,  revs ( nfl, respond ) ,  revs ( rotor , respond ) , 
i tt ( engl , respond ) ,  torque ( e ngl , respond ) , 

torque (xmsn, respond) ) 

Goal  list  is:  [revs(ngl, respond) ,  revs (rotor , respond ) , 

otr(genl),  land(pract),  off (engl),  torque (xmsn, respond ) , 
torque (eng2r respond) ,  revs(n£2, respond) ,  revs i ng2 , respond ) 3 

difference:  Coff(genl),  land(pract),  offCengi), 

torque { eng2 , respond ) ,  revs (n£2 r respond ) ,  revs ( na2 , respond ) ] 

current  operator:  conf irm_nf 2_£ailure  depth  is:  2 

*********************************************** 

operator  preconditions  have  been  met 
items  being  deleted  are:  M 

items  being  added  are:  (revs(ng2/respond) , 

revs ( n£2, respond ) ,  failed(gov2) ,  torque ( eng27 respond ) 1 

Goal  list  is:  [ revs ( ngl, respond ) ,  revs ( rotor , respond ) , 

off(genl),  land(pract),  off(engl),  torque ( xmsn, respond ) , 
torque ( eng2 , respond ) ,  revs (nf 2, respond ) ,  revs ( ng2, respond ) 1 

difference :  t  of f ( genl ) , land ( pract ) ,of f ( engl ) ) 
*********************************************** 

current  operator:  engl_off  depth  is:  3 
*********************************************** 

operator  preconditions  have  been  met 
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items  being  deleted  are:  lon(engl) 1 
items  being  added  are:  [o££(engl)3 

Goal  list  is:  I  revs ( ngl, respond ) ,  revs(rotor,respond) , 
off(genl),  land(pract),  of£(engl)/  torque ( xmsn, respond ) , 
torque (eng2, respond) ,  revs ( nf2, respond ) ,  revs(ng2, respond) J 

difference :  { off (genl ) , land ( pract ) 3 
a*************************:***:******:**:********** 

current  operator:  genl_o£f  depth  is:  4 
*********************************************** 

operator  preconditions  have  been  met 
items  being  deleted  are:  (on(genl)j 
items  being  added  are:  (or£(geni)3 

Goal  list  is:  [ revs < ngl , respond ) ,  revs < rotor , respond ) , 
off (genl),  land (pract),  o£f(engl),  torque < xmsn , respond ) , 
torque ( eng2 , respond ) ,  r evs < nf 2 , respond ) ,  revs ( ng2 , respond ) 3 

difference:  ( land (pract ) 1 
*****************************************  ****** 

current  operator:  pract_landlng_outrankedl  depth  is:  5 
*********************************************** 

Goal  list  is:  (land(pos)] 
difference:  (land(pos)l 

*********************************************** 

current  operator:  pos_landing_outranked  depth  is:  6 
*********************************************** 

Goal  list  is:  tland(auto)) 
difference:  (land(auto)l 
*********************************************** 
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current  operator:  autorotation  depth  is:  7 
*********************************************** 

Goal  list  is:  I failed(engl) , failed(eng2 ) ] 

difference:  t failed(eng2 ) J 
*********************************************** 

current  operator:  conf irm_eng2_failure  depth  is:  8 

*********************************************** 

Goal  list  is:  t torque (6092,0000 ) ,  torque ( xmsn, low) , 

revs ( ng2, none ) ,  revs ( nf 2, none ) ,  oil_press (eng2,none ) , 

f ai led ( gen2 ) ,  itt (eng2, none ) ,  left_yaw,  on(fuel2), 

£ull(throttle2),  revs (rotor, low) ) 

difference:  l torque(eng2,none) ,  revs (ng2, none ) , 

revs ( n£2 , none ) ,  oil_press(eng2,none ) ,  £ailed(gen2 ) , 

itt(eng2,none)  1 

****************************  ****** ************* 

current  operator:  check_gen2_£ailure  depth  is:  9 

*********************************************** 

Goal  list  is:  lon(gen2),ammeter(eng2,none) 1 
difference:  t on ( gen2 ), ammeter (eng2, none ) ] 
*********************************************** 

current  operator:  pos_landingl  depth  is:  6 
*********************************************** 

operator  preconditions  have  been  met 
items  being  deleted  are:  Calt ltude( 1000 ) ,airspeed( 100)  1 
items  being  added  are:  ( land (pos ), altitude ( 0 ) , airspeed ( 0 ) ] 
operator  preconditions  have  been  met 
items  being  deleted  are:  11 
items  being  added  are:  l land ( pract ) J 
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operator  preconditions  have  been  met 


The  recommended  operators  are:  tconf irm_engl_failure/ 
conf irm_nf 2_failure,  engl_o££,  genl_o£f,  pos_landingl, 
pract_landing_outrankedl ] 


The  final  state  description  is:  [ oil_press (engl, none ) , 
oil_press(eng2,ok ) ,  revs ( rotor , low) ,  of f ( rain_rmv ) , 
off (master_arm) ,  landing_zone ( clear ) ,  f ull ( throttlel ) , 
f ul 1 ( thrott le2 ) ,  of f { master_caut ion ) ,  automat ic ( govl ) , 
automatic ( gov2 ) ,  on(fuell)/  on(fuel2),  normal ( fuel_press ) , 
torque(engl,none ) ,  torque ( eng2 , erratic ) ,  torque ( xmsn, low) , 
torque (xmsn, erratic) ,  revs ( ngl, none ) ,  revs (ng2, erratic ) , 
revs  ( nfl,  none  ) ,  revs(nf  2,erratic) ,  oil^empCengl/Ok  ) , 
oil_temp(  eng2/ok),  failed(genl) ,  fulKfuel),  off  (seas) , 
on(ecu),  oil_temp(c_box,ok ) ,  oil_press(c_box,ok ) , 
oil_temo(xmsn,ok ) ,  oil_press (xmsn, ok ) ,  ammeter ( genl , none ) , 
ammeter ( gen2 , ok ) ,  fuel_press (ok ) ,  i tt ( engl , none ) , 
itt ( eng2, errat ic ) ,  oi l_press ( hyd_sys_l, ok ) , 
oil_press(hyd_sys_2,ok ) ,  a irspeed ( 100 ) ,  alt itude ( 1000 ) , 
lef t_yaw] 


52 


APPENDIX  D 


SOURCE  CODE  LISTING 


nowarnings 
code  =  3500 
trail  -  100 

/n**********************  domains  *************************/ 

domains 

/*  The  domains  section  contains  the  declarations  of  the 
types  and  symbols  used  in  this  program 
*/ 

/*  The  caution  panel  cluster  is  represented  by  cerms  each 
corresponding  to  a  single  liant  in  the  aircraft 

*/ 


segment  - 

engl_oil_press ; 
engl_chip_detr : 
engl_fuel_f liter ; 
dc_gen_l ; 
xmsn_chip_detr ; 
temp_press_90; 
chip_detr_90; 
xmsn_oi l_hot ; 
c_box_oi l_press ; 
hyd  j>ress_l ; 
hyd_temp_l; 
ac_main; 
engl_gov_man ; 
f ire_l_pull; 
rpm_rotor_low; 
rpm_ngl; 


eng2_oil_press ; 
eng2  _chip_detr ; 
eng2_fuel_f liter ; 
dc_gen_2 ; 
c_box_chip_detr ; 
temp  jpress_42; 
chip_detr_42; 

xmsn_ol l_press;  xmsn_oi l_byp; 

c_box_oil_hot  ; 

hyd_press_2 ; 

hyd_temp_2 ; 

ac_stby  ; 

eng2_gov_man; 

£ ire_2_pull ; 

rpm_rotor_high; 

rpm_ng2 


segment_list  =  segment* 


/* 

Aircraft  weight  and  landing  zone  quality  are  represented 
by  the  follow-  lng  declarations,  with  respect  to  the  scope 
of  this  implementation  the  weight  can  be  one  of  two  types 
and  the  zone  quality  can  be  one  of  three  values.  The  nine 
different  landing  profiles  and  ergencies.  A  landing  as  a 
result  of  a  malfunction  could  be  described  as  land  as  soon 
as  practical,  soon  as  possible,  or  a  landing  via 
autorotation.  Profiles  can  can  be  normal,  high  speed, 
sliding,  steep,  aircraft  at  max  weight,  or  a  landing  to  a 
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sloped  zone. 

*/ 

wt_class  = 

heavy  ;  moderate 

zone_quality  = 

clear  ;  confined  ;  slope 


type_landing  = 

pract;  pos;  auto; 
normal;  high_speed;  slope; 
sliding;  max_weight;  steep 


/* 

A  component  is  defined  as  being  any  of  the  below  listed 
names.  Some  of  these  components  were  not  utilized  in  the 
knowledge  base. 

V 

component  = 

engl  ;  ang2  ;  xmsn  ;  c_oox  ; 
eng_o  i 1 _press : 
genl  ;  gen2  ;  govl  ;  gov2  ; 
master _cauc ion  ;  mascar^arm  ; 
ecu  ;  seas  ; 

fuel  ;  fueil  ;  £uel2  ;  fuel_press  ; 

thrott lei  ;  throttle!  ; 

oil_cemp_90  ;  oil_press_90  ; 
oil_temp_42  ;  oil_press_42  ; 
gear_box_90  ;  gear_box_42  ; 
c_box_oil_press;  c_box_oil_temp; 
xmsn_oil_temp;  xmsn_oil_press  ; 
hyd_sys_l  ;  hyd_sys_2  ;  hyd_press; 
hyd_temp_l;  hyd_temp_2; 
rotor  ;  ngl  ;  ng2  ;  itt_l  ;  itt_2  ; 
nfl  ;  nf2  ;  rain_rmv  ;  power  ; 
maln_inverter  ;  standby_inverter 

/*  The  aircraft's  guages  and  instruments  as  seen  by  the 
pilot  are  refered  to  as  components.  A  component  has  eight 
status  values  and  are  prioritized  by  a  fact  in  the 
knowledge  base.  A  given  component  may  have  more  than  one 
status  true  at  any  given  time.  For  instance  eng  torque  could 
be  both  *ok'  and  'decrease'  simultaniously . 

*/ 

component_status  = 

none  ;  high  ;  low  ; 
increase  ;  decrease  ; 
ok  ;  erratic  ;  respond 


/* 

A  status  list  is  a  list  of  component  status  values.  This 
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list  established  the  priority  of  the  status  values 
*/ 

status_list  =  coraponent_status* 

/*  Some  components  are  described  as  being  in  one  of  the 
following  two  modes.  Each  is  mutually  exclusive 
*/ 

manual, 

automatic  =  mode 


/*  A  partial  state  description  of  the  aircraft  and  it's 
environment  at  any  given  time  is  defined  in  terms  of  the 
following  state  elements. 

*/ 


state_element  = 

prepare_f or_f a i lure (component ) ; power ( component_status ) ; 


ful 1 ( component ) ; 
metal_part icles ( component ) ; 
fuel_press ( component_status ) ; 
manual ( component ) ; 
normal ( component ) ; 
failed ( component ) ; 
on ( component ) ; 
of £ ( component ) ; 
gross_weight ( wt_class ) ; 
altitude ( f t ) ; 
land( type_landing) ; 
itt ( component , component_status ) ;  lef t_yaw; 
ammeter ( component , component_status ) ; 
revs(  component,  component_status ) ; 
oil_press(  component,  component_status ) ; 
oil_temp(  component,  component_status  ); 
torque (  component,  component_status  ) 


landing_zone (zone_quality) ; 

fuel_obstruction(component) ; 

automatic ( component ) ; 

idle ( component ) ; 

decrease ( component ) ; 

hot (component ) ; 

engaged ( component ) ; 

f ire ( component ) ; 

a ir speed ( knots ) ; 

oat (component_status ) ; 

oil_bypassing_cooler ; 


state  list  =  state  element* 


/*  Actions  to  be  taken  by  the  pilot  or  some 
must  be  taken  to  satisfy  an  immediate  goal, 
of  this  planner  is  to  present  the  operators 
as  a  possible  diagnosis  of  the  present  state 
list  of  these  operators  are  refered  to  as  an 
*/ 


action  which 
The  objective 
to  the  pilot 
of  affairs.  A 
op_l  is  t . 


operator  = 

normal_approach  ;  slope_landing  ;  steep_approach  ; 
high_speed_approach  ;  max_we ight_landing  ;  sliding_landing; 
pract_landing; prac t_landing_out ranked 1; 
pract_land ing_outranked2; pos_landingl; pos_landing2; 
autorotation;conf irm_engl_f a i lure ;  conf irm_eng2_failure; 
engage_scas  ;  ecu_off  ;  rain_rmv_off  ;  master_arm_of f ; 
govl_to_manual ;govl_to_automatic; conf irm_nfl_f allure ; 
check_ngl_overspeed  ;  check_ngl_underspeed  ; gov2_to_manual ; 
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gov2_to_automatic  ;con£irm_n£2_£allure;check_ng2_overspeed; 
check_ng2_underspeed  ;  throttlel_idle  ;  throttle2_ldle; 
con£irm_dual_eng_£allure  ;  check_genl_£al lure  ; 
check_gen2_£ailure;genl_of £;  gen2_off;  engl_o£f;  eng2_o£f; 
pos_landing_outranked 

op_list  =  operator* 

/***********************  DATABASE  ************************/ 
database 

/*  The  database  is  contains  only  one  fact  and  that  is  the 
list  of  goals  that  are  asserted  by  scanning  the  caution 
lights  and  the  Instrument  panel.  The  database  is  only 
active  during  this  process  and  the  fact  temp_goals  is 
retracted  prior  to  calling  means_ends_ana lysis . 

*/ 

temp_goals  (state_list) 


nest_level, 

percent,  ft,  degrees,  amps, 
lbs,  knots,  oat,  value 
=  integer 
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/***********************  PREDICATES  ***********************/ 
predicates 


problem_solver 


state_list, op_list/state_list  ) 


/*  predicates  used  directly  in  the  means  ends  analysis 
procedure 
*/ 


means_ends 

recommended 
precondition 
addpost condition 
deietepostcondit 


(  state_list,state_list, op_list , 
state_l ist , nest_level  ) 

{  state_list,  state_list,  operator 
(  state_list,  operator,  state_list 
(  operator,  stace_iist  ) 
ion  (  state_lis~,  operator,  state_list 


) 

) 

) 


/*  predicates  used  to  scan  the  cockpit  for  goals 
V 


check_lights 
cneck_guages 
check_r evs 
check _pr assures 
check_tamps 
check_torque 


{  state_list,  3tate_lisr  ) 
(  stace_Iist  ) 

(  state_list  } 

(  3tate_list  ) 

(  state_Iist  ) 

(  state  list  ) 


nascer_raution 
caut ion_l  ignc 
secondary 


(  3tate_list,  stax:e_li3t  ) 
(  state_lisc,  segment;  ) 

(  state_lisr,  segment:) 


create_goals  (  state_list  ) 

ck_duplicate  (  state_element  ,  state_list  ) 

pick_pr ior ity_set  (  state_element ,  state_list  ) 
priority_set  (  state_list  ) 

append_bes t_goal  (  state_list,  state_element  ) 


below_l imit 
changed 
update 
scan_pane 1 
segment_pane 1 


(  status_list  ) 

(  status_list  ) 

(  state_list  ) 

(  segment_l 1st ,  state_list  ) 
(  segment_list  ) 


/*  utilities 
*/ 

deleteitems 
de lete 

state_list  ) 
union 
append 
difference 
subset 
member 
member 2 


(  state_list,  state_list,  state_list  ) 
(  state_element ,  state_list, 

(  state_list,  state_list,  state_list  ) 
(  op_list,  op_list,  op_list  ) 

(  state_list,  state_list,  state_list  ) 
(  state_list,  state_list  ) 

(  statc_clement ,  state_list  ) 

(  state_element/  state_list  ) 
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status_member 

/*  test  cases 
*/ 

testl 
test2 
test3 
test  4 


(  component_status,  status_llst  ) 


(  op_list, state_list  ) 
(  op_list,state_list  ) 
(  op_list , state_list  ) 
(  op_list, state_llst  ) 
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/***********************  CLAUSES  ***********************/ 


l  uses 


/*  Pr oblem_solver  is  the  top  level  predicate  from  which  all 
other  predicates  are  called.  The  goals  are  initialized  to 

empty.  The  guages  are  first  searched  for  components  in 

need  of  some  type  of  response.  Then  the  caution  lights  are 

searched.  Once  the  goals  have  been  asserted  means_ends  is 
called  to  present  the  operators  necessary  to  solve  the 

problem. 

*/ 

pr oblem_solver (  State , Oplist , Goalstate  ):- 

asserta ( temp_goals ((])), 
check_guages ( State  ), 
check_lights (State,  Goal_list ) , ! , 
means_ends(  State,  Goal_list,  Oplist, 
Goalstate ,  1  ) , ! . 

/*  This  recursive  procedure  has  two  rules.  The  first  is  a 
single  basis  step,  which  in  effect  says  stop  with  any 

state  that  includes  all  the  goal  facts.  The  second  rule 
is  the  induction  step  which  has  two  re-  cursive  calls:  the 
first  for  the  preconditions,  the  second  for  the 
postconditions.  A  list  of  facts  is  computed  that  are 
different  between  the  current  state  and  the  goal.  The 

recommended  facts  are  searched  in  order  to  find  one  whose 
goal  is  a  subset  of  the  goal  list.  If  so  then  retrieve  the 
preconditions  of  the  operator,  and  recursively  call  means 
ends  to  resolve  the  differences.  Once  the  preconditions 

have  been  satisfied  the  deletepostcondit ion  facts  are 
deleted  from  the  final  state  resulting  from  the  precondition 
recursion.  Then  the  addpostcondit ion  facts  are  retrieved  and 
added  to  the  state.  This  determines  the  state  after  the 
operator  application.  This  process  is  done  recursively 
until  all  preconditions  have  been  satisfied.  The  final 
operator  list  for  the  whole  problem  is  the  appending 

together  of  the  precondition-recursion  operator  list,  the 
recommended  operator,  and  the  postcondition  operator  list. 

*/ 

means_ends(  State,  Goal_list,  [],  State,  N  )  :- 

difference(  Goal_list,  State,  (]  ), 

wr ite ( "operator  preconditions  have  been  met"), 
nl, nl . 

means_ends(  State,  Goal_list,  Oplist,  Goalstate,  N  )  :- 

difference(  Goal_list,  State,  D  ), 
write("Goal  list  is:  ",Goal_list ) ,nl,nl, 
wr  i te ( "d i f f erence ,D),nl,nl, 
recommended (  State,  Dsub,  Operator  ), 
subset (  Dsub,  D  ), 
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write ("*********** *************************"), 
nl^l, 

write ( "current  operator:  ",  Operator), 
write("  depth  is:  ",  N  ),nl,nl, 
write ("************************************" ) , 
nl , nl , 

precond it ion (  State,  Operator,  Prelist  ), 

N2  =  N  +  1, 

means_ends(  State,  Prelist,  Preoplist, 
Prestate,  N2  ), 

deletepostcondition(  State,  Operator, 

Deletepostl ist  ), 
delete  items (  Deletepostlist ,  Prestate, 
Prestate2  ), 

write("items  being  deleted  are:  ", 
Deletepostlist) ,nl,nl, 
addpostcondit i on (  Operator,  Addpostlist  ), 
write{" items  being  added  are:  ", 

Addpostlist) ,nl,nl, 

union(  Addpostlist,  Prestate2,  Postlist  ), 
means_ends (Postlist ,  Goal_list,  Postoplist, 
Goals tate ,  N2  ) , 

append (  Preoplist,  [  Operator  I  Postoplist  ), 
Opl ist  ) , ! . 

/*  'create  goals'  is  a  control  structure  that  provides  a 
way  to  generate  goals  from  within  the  program.  Before 
goals  are  appended  to  the  goal  list,  they  are  checked 
against  other  goals  in  the  same  class  to  eliminate  the 
appending  of  duplicates.  Each  class  is  a  list  of  prioritized 
state  elements.  If  a  goal  of  a  higher  priority  has  already 
been  appended  then  the  goal  under  con-  sideration  will  not 
be  appended.  create_goals  looks  at  the  first  of  the  goals 
to  be  considered.  If  a  duplicate  already  exists  in  the 
present  goal  list  the  ck_duplicate  fails  and  create_goals 
is  called  again  to  consider  the  next  goal.  If  there  are  no 
duplicates,  append_best_goal  checks  to  see  if  another 

goal  of  a  higher  priority  within  the  same  class  has 
already  been  asserted. If  no  higher  goal  has  been  asserted 
then  append_best_goal  adds  the  new  goal  to  the  new  goal 
list . 

*/ 

create_goals (  []):-!.  /*  succedes  when  no  goals  are 

specified.  */ 

create_goals (  IGlIRest)  )  :- 

temp_goals ( Current_goals  ), 
ck_dupl icate (  Gl,  Current_goals  ), 
pick_pr iority_set (Gl,  Set  ), 
append_best_goal(Set,Gl) , 
create_goals (  Rest  ),!. 
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create_goals(  [Gil Rest)  )  !,  create_goals (  Rest  ). 

ck_dupl icate (  X,  L  )  not(  member  (  X,  L  )). 

/*  before  a  goal  is  asserted  into  the  goal  list  it  is 
checked  against  other  goals  in  its  priority  set  to  see  if 
a  goal  of  a  higher  priority  has  already  been  asserted.  Any 
goal  which  is  not  explicitly  listed  in  a  priority  set  fact 
is  assumed  to  be  the  only  member  in  lt*s  class. 

*/ 

pick_prior ity_set (  X,  C  )  or ior ity_set (  C  ), 

member  (  X,  C  ). 

Dick_?r ior itv_set (  Xf  [X]  ).  /*  default  for  singleton  sets 

V 


/*  If  the  highest  priority  item  matches  the  goal  then 
append  it.  check  to  see  if  a  higher  proiritv  goal  has 

been  asserted.  The  procedure  stops  at  the  higner  priority 
goal  if  already  asserted 
*/ 

append_best_goal (  [ SingieGoal I RestSet 3 , SingleGoal  ) 

temp_goa i.3 [Current _goa Is  ) , 
update { [ SingleGoal I Current_goais  3 ) r i . 

/*  assertion  */ 

append_best_goai (  i SI j RestSet J ,Single_goal  ) 

/*  no  assertion  */ 

temp_goals (Current_goals ) , 
ck_duplicate(  Sl,Current_goals  ), 
append_best_goal (  RestSet , Single_goal  ). 

update (  New_goals  ) 

retract ( temp_goals (_) ) , 

asserta ( temp_goals (New_goals ) ),  !  . 

dif ference( [  )  ,S, [ 3 )  . 
difference(  I  P  I  G  I,  S,  G2  ) 
member (  P,  S  ),  !, 

dlfference(  G,  S,  G2  ) . 
difference(  (  P  I  G  ],  S,  [  P  |  G2  I  )  :- 
difference(  G,  S,  G2  ). 

subset (  [ ) ,  L  ) . 
subset<  I  X  I  L  1,  L2  ) 
member (  X,  L2  ) , 
subset(  L,  L2  ). 

member (  X,  I  X  I  L  1  ) 

member(  X,  (  Y  I  L  )  )  :-  member(  X,  L  ) . 
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member 2 (  X,  (  X  I  L  1  ). 

member2<  X,  t  Y  I  L  1  )  :-  member2(  X,  L  ) . 
status_merober (  X,  (  X  I  L  1  )  i. 

status_member (  X,  I  Y  1  L  )  )  status_member (  X,  L  ) . 

append (  [ J ,  L,  L  )  . 


append ( 

(  X  1  L 

1, 

L2, 

(  X  1 

L3  }  )  :- 

append ( 

L, 

L2  , 

L3  )  . 

union< 

M ,  L,  L 

)  . 

union< 

(  X  1  LI 

1, 

L2 , 

L3  ) 

member (  X, 

L2  )  ,  !  , 

union<  LI, 

L2 ,  L3  ) 

union( 

C  X  I  LI 

3, 

L2, 

(  X  i 

£.3  1):- 

unioni  LI 

L2, 

L3  )  . 

de lete i terns (  (),  L,  L  ). 

deieteitam3 (  {  X  )  L  J ,  L2 ,  L3  ) 

delete (  X,  L2,  L4  ), 
deleteitems <  L,  L4,  L3  ), 

deiete<  X,  l ] ,  11  ). 

delete <  X,  {  X  i  L  ],  A  )  : -  J ,  delete (  X,  L,  M  ). 

delata<  X ,  l  'I  1  L  3  ,  (  Y  i  M  }  )  deleta<  X,  L,  H  ). 


/*  The  performance  guages  are  the  primary  area  of  interest 
and  involve  the  temperatures,  pressures,  torque, and  RPM’s  of 
var i ous  components . 

*/ 

check_guages (  State  ) 

check_revs(  State  ), 
check_pressures (  State  ), 
check_temps(  State  ), 
check_torque (  State  ). 

/*  The  rules  check_revs,check_pressures,check_temps,and 
check_torque  are  very  similar.  Bach  guage  is  checked  for  a 
change  in  value.  A  change  in  value  requires  a  response  of 
some  sort.  The  goal  is  to  respond  to  the  guage  or  light  in 
question. 

*/ 

check_revs(  State  ) 

member 2 ( revs (Guage,  Value  ),  State  ), 

changed (Up_or_Down) , 

status_member (Value, Up_or_Down) , 

wr ite ( "revs ( ", Guage ,",  ",Value,")"),nl,nl, 

create_goals( {revs (Guage, respond) ) ) ,fail. 

check_revs(  State  ). 
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check_pressures (  State  ) 

member 2 ( oil_press (Guage,  Value  ),  State  ), 

changed ( Up_or_Down ) , 

status_member ( Value ,Up_or_Down) , 

write(  "oil_press(  ", Guage, ",  ", Value,")"  ), 

nl,nl, 

create_goals ( [ oil_press (Guage , respond ) ] ) , fail . 
check_pressures (  State  ). 

check_temps(  State  ) 

meraber2(oil_temp(Guage,  Value  ),  State  ), 
changed ( Up_or_Down ) , 
status_member ( Value , Up_or_Down) , 
write( Hoil_temp( ", Guage, ",  ",Value,")H  ), 
nl, nl, 

create_goals ( ( oi l_temp(Guage , respond ) J ) , fail . 
check_temps(  State  ). 

check_torque <  State  ) 

member 2 ( torque ( Guage ,  Value  ),  State  ), 
changed ( Up_or_Dovn ) , 
statusjmember ( Value , Up_or_Down ) , 
wr ite ( "torque (" , Guage ," ,  ",Value,")"  ), 
n  1 ,  n  1 , 

create_goal3 ( l torque ( Guage , respond ) 3 ) , fail . 
check_torque (  State  ). 


/*  check_lights  goes  through  all  the  caution  lights  and 
accumulates  all  the  goals  necessary  to  correct  the  present 
state  with  respect  to  the  caution  panel. 

*/ 

check_lights (  State, Goal_list  ) 

segment_panel (Cluster ) , 
scan_panel (Cluster, State ) . 

check_llghts<  State,  Goal_list  ) 

temp_goals (Goal_list ) , 
retract ( temp_goals(_) ) . 

/*  scan_panel  calls  each  caution  light  in  the  panel 
*/ 

scan_panel( C  J, State) :-!,£ail. 

scan_panel ( ( Seg I  Tail ] , State ) : - 

caution_light( State, Seg), ! , 
scan_panel( Tail, State) . 

scan_panel ( ( Seg | Tail ) , State ) : -scan_panel (Tail, State ) . 
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/*************CAUTION  and  warning  lights  *************/ 


segment _panel ( (  engl_oil_press, 

engl_chip_detr , 
engl_£  uel_£  liter , 
dc_gen_l, 
xmsn_chip_detr , 

_  temp_press_90, 
chip_detr_90, 
xmsn_oil_hot , 
c_box_o i l_press , 
hyd_press_l/ 
hyd_temp_l, 
ac_main, 
engl_gov_man/ 
f ire_l_pull, 
rpm_rotor_low, 
rpm_ngl, 

xmsn_oil_byp  1 )  . 


eng2_oll_press, 
eng2_chip_detr , 
eng2_£uel_£  liter , 
dc_gen_2 , 
c_box_chip_detr , 
temp_pr ess_4  2 , 
chip_detr_42, 
xmsn^il^ress, 
c_box_oi l_hot  , 
hyd_press_2 , 
hyd_temp_2 , 
ac_stby  , 
eng2_gov_man, 

£ ire_2_pull , 
rpm_rotor_high, 
rpm_ng2 , 


/*  The  master_caution  light  is  illuminated  i£  there  exists 
any  caution  light  that  is  on 
*/ 

master_caution(  State,  Goal_list  ) 

caution_light (  State,  _  ) . 


/*  Listed  below  are  the  rules  for  each  caution  light.  Each 
caution  light  has  its  own  goals  to  assert  and  in  some  cases 
secondary  indications  are  necessary  to  choose  the 
appropriate  goals.  All  sensor  information  is  assumed  true 
and  is  not  questioned.  This  assumption  eliminates  cross¬ 
checking  requirements. 

*/ 

caution_light (  State,  engl_oi l_press ) : - 

member (oil jpress(  engl,  X  ),  State  ), 
below_limit (L) ,  statusjmember (X,L) , 
write(  w  Caution  light:  engl_oil j>ress"  ),nl, 
create_goals ( l  off (engl),  land(pract)  1  ). 

cautlon_light(  State,  engl_chip_detr  ):- 

member (me tal_part icles ( engl ) ,  State  ), 
write(  M  Caution  light:  engl_chip_detr  M  ),nl, 
secondary( State,  engl_chip_detr ) . 

caut ion_light(  State,  eng2_oil_press  ):- 

member (oil_press(  eng2,  X  ),  State  ), 
below_limit ( L) ,  status_member(X,L), 
write(  H  Caution  light:  eng2_oil_press''  ),nl, 
create_goals ( (  of£(eng2),  land(pract)  1  ). 

caution_light (  State,  eng2_chip_detr  ):- 
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member (metal_particles ( eng2 ) ,  State  ), 
write(  M  Caution  light:  eng2_chip_detr  "  ),nl, 
secondary ( State ,  eng2_chip_detr ) . 

caut ion_l ight (  State,  engl_fuel_f liter  ):- 

member ( fuel_obstruction(engl ) ,  State ) , 
write(  "  Caution  light:  engl_£uel_£ liter  "),nl, 
create_goals ( C  prepare_£or_£ailure ( engl ) , 
land(pract)  ]  ). 

caution_light (  State,  eng2_fuel_f ilter  ):- 

memoeri £ue l_obs truer  ion <eng2 ) ,  State) , 
write<  "  Caution  lignt:  eng2_iuel_£ilter  "),ni, 
craace_goals ( [ precare_£or_£ailure  <  eng2 ) , 
land ( pract )  ]  ) . 

caut ion_l ight (  State,  dc_gen_l  ):- 

member { off i genl ) ,  State  ), 

write(  "  Caution  light:  dc_gen_l  "  ),ni, 

create_goals { t  3  ) , 

caution_lignt (  State,  dc_gen_l  ):- 

ijiemoeri  failed  <geni) ,  State), 

writat'  *'  Caution  light:  dc_gen_l  ;l  ),ni, 

create_goals ( [  off {genl)  ]  ). 

caut ion_l ignt (  State,  dc_gen_2  ):- 

member (of f (gen2 ) ,  State  ), 

write(  **  Caution  light:  dc_gen_2  "  ),nl, 

create_goals ( l  }  ). 

caut ion_l ight (  State,  dc_gen_2  ):- 

member ( failed (gen2 ) ,  State), 

write(  "  Caution  light:  dc_gen_2  "  ),nl, 

create_goals ( C  o££(gen2)  )  ). 

caut ion_l ight (  State,  xmsn_chip_detr  ):- 

member (metal_particles(  xmsn  ),  State  ), 
write(  M  Caution  light:  xmsn_chip_detr  "  ),nl, 
secondary ( State ,  xmsn_chlp_detr ) . 

cautlon_l ight (  State,  c_box_chip_detr  ):- 

member  (metal_par tides  (  c_box  ),  State  ), 
wrlte(  "  Caution  light:  c_box_chip_detr  M  ),nl, 
create_goals ( [power (decrease ), land ( pos )  ]  ). 

caut ion_l ight (  State,  tempjpress_90  ):- 

member ( oil_temp(  gear_box_90,  high  ),  State  ), 
write(  "  Caution  light:  temp_press_90  w  ),nl, 
create_goals ( (  land(pos)  J  ). 
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caut ion_l  ight  (  State,  temp_press_90  ):- 

member ( oil_press (  gear _box_90,  X  ),  State  ), 
below_llmlt(L) ,  3tatus_meraber ( X, L) , 
write(  H  Caution  light:  tempjpress_90  "  ),nl, 
create_goals ( f  land(pos)  J  ). 

caution_light (  State,  temp_press_42  ):- 

member (oil_temp(  gear_box_42,  high  ),  State  ), 
write(  H  Caution  light:  temp_press_42  H  ),nl, 
create_goals ( {  land(pos)  ]  ). 

caution_light (  State,  tamp_?ress_42  ):- 

member (oil_press(  gear_box_42,  X  ),  State  ), 
below_limit (L ) ,  status _member (X,L) , 
write<  "  Caution  light:  temp_press_42  "  ),nl, 
create_goals ( t  land (pos)  3  ). 

caut ion_lignt (  State,  chip_detr_90  ):- 

member (metal_particles(gear_box_90) , State  ) , 
write{  ”  Caution  light:  cnip_detr_90  "  ),nl, 
create_goais ( I  power (decrease ) ,land(pract) 3 ) . 

caution_light<  State,  chip_detr_42  ):- 

member (metal_particies (aear_oox_42  ), State  ), 
-write i  "  Caution  light:  chip_detr_42  "  ),nl, 
creata_goals ( l power (decrease ) , land ( pract ) }  ) . 

caution_light (  State,  xrasn_oil_hot  ):- 

member (oil_temp(  xmsn,  high  ),  State  ), 
write(  "  Caution  light:  xmsn_oil_hot  w  ),nl, 
create_goals( l  power (decrease ) , 

prepare_for_£ai lure ( xmsn) , 
land ( pos )  ]  ) . 

caution_light (  State,  xmsn_oil_press  ):- 

member (oil_press(  xmsn,  X  ),  State  ), 
below_l imit ( L ) ,  status_member(X,L) , 
write(  M  Caution  light:  xmsn_oil_press  "  ),nl, 
create_goals( {  power (decrease ) , 

prepare_£or_failure ( xmsn ) , 
land ( pos )  1  ) . 

caut ion_l ight (  State,  c_box_oi l_press  ):- 

member ( oi l_press (  c_box,  high  ),  State  ), 
write (  "  Caution  light:  c_box_oll_press  M  ),nl 
create_goals ( l  power (decrease ) ,  land (pos)  ]  ) 

caut ion_l ight (  State,  c_box_oi l_hot  ):- 

member ( oil_temp(  c_box,  high  ),  State  ), 
write(  "  Caution  light:  c_box_oi l_hot  "  ),nl, 
create_goals ( l  power (decrease ) ,  land (pos)  J  ). 
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cautlon_light (  State,  hyd_press_l  ):- 

member ( oil_pr ess (  hyd_sys_l,  X  ),  State  ), 
below_llmit (L) ,  statusjmember ( X, L ) , 
write(  "  Caution  light:  hyd_press_l  "  ),nl, 
create_goals( (  off ( hyd_sys_l ), land ( pos )  }  ). 

caution_light (  State,  hyd_press_2  ):- 

member (oil_press(  hyd_sys_2,  X  ),  State  ), 
below_limit (L) ,  status_member ( X,L) , 
write(  "  Caution  light:  hyd_press_2  "  ),nl, 
create_goals ( (  off ( hyd_sys_2 ), land ( pos )  ]  ). 

caut ion_light (  State,  hyd_temp_l  ):- 

member (oil_temp(  hyd_sys_l,  high  ),  State  ), 
write (  ”  Caution  light:  hyd_temp_l  "  ),nl, 
create_goals( l  of £ ( hyd_sys_l ) , land ( pos )  J  ). 

caution_light (  State,  hyd_temp_2  ):- 

member ( oil_temp(  hyd_sys_2,  high  ),  State  ), 
write(  *  Caution  light:  hyd_temp_2  H  ),nl, 
create_goals ( l  off ( hyd_sys_2 ), land ( pos )  )  ). 

caution_l ight {  State,  xmsn_oil_byp  ):- 

member ( oiljbypass ing_cooler ,  State  ), 
write(  "  Caution  light:  xmsn_oil_byp  "  ),nl, 
create_goals ( l power (decrease ) , 

prepare_£or_£ailure(xmsn) , 
land (pos)  ]  ). 

caut ion_light (  State,  ac_main  ):- 

member ( failed (  main_inverter  ),  State  ), 
write(  w  Caution  light:  ac_raain  "  ),nl, 
create_goals ( l 1  ).  /*  not  implemented  */ 

caut ion_l ight (  State,  ac_stby  ):- 

member ( failed (  standby_inverter  ),  State  ), 
write(  M  Caution  light:  ac_stby  "  ),nl, 
create_goals ( ( )  ).  /*  not  implemented  */ 

caut lon_l ight (  State,  engl_gov_man  ):- 

member (manual (  govl).  State  ), 

write(  H  Caution  light:  engl_gov_man  M  ),nl, 

create_goals ( l 1  )./*  no  goal  required  */ 

caut ion_l ight (  State,  eng2_gov_man  ):- 

member (manual (  gov2).  State  ), 

wrlte(  H  Caution  light:  eng2_gov_man  "  ),nl, 

create_goals ( ( ]  )./*  no  goal  required  */ 

caut lon_l ight (  State,  £lre_l_pull  ):- 
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member (£ ire (  engl  ),  State  ), 

write(  "  Caution  light:  fire_l_pull  "  >,01, 

create_goals ( t 1  ). 

caution_l ight (  State,  £ire_2_pull  ):- 
member (£ ire (  eng2  ),  State  ), 
write(  H  Caution  light:  £ire_2_pull  M  ),nl, 
create_goals ( ()  ). 

caution_light(  State,  rpm_ngl  ):- 

member ( revs (  ngl,  X  ),  State  ), 
below_limit(L) ,  status_member ( X,L ) , 
write(  "  Caution  light:  rpm_ngl  "  ),nl, 
create_goals ( t  revs (ngl, respond)  ]  ). 

caution_light (  State,  rpm_ng2  ):- 

member ( revs (  ng2,  X  ),  State  ), 
below_l imi t ( L) ,  status_member (X,L) , 
write (  M  Caution  light:  rpm_ng2  ”  ),nl, 
create_goals ( [  revs ( ng2 , respond )  )  ). 

caution_l ight (  State,  rpm_rotor_low  ):- 

member ( revs (  rotor,  low  ),  State  ), 

write (  "  Caution  light:  rpm_rotor_low  "  ),nl, 

create_goals ( (  revs ( rotor , respond )  I  ). 

caution_light (  State,  rpm_rotor_high  ):- 

member ( revs (  rotor,  high  ),  State  ), 

write(  "  Caution  light:  rpm_rotor_high  **  ),nl, 

create_goals( l  revs(rotor, respond)  1  ). 


/*  secondary  state-requirements  for  certain  caution  lights 
are  expressed  below. 

*/ 

secondary( State,  engl_chip_detr )  :- 

member(oil _press(engl,  X  ),  State  ), 
below_l imit (L ) ,  status_member (X,L) , 
create_goals ( I  off (engl ), land ( pract ) 1  ). 
secondary( State,  engl_chip_detr )  :- 

member (oil_temp( engl,  high).  State  ), 
create_goals( {  of £ (engl ), land (pract ) ]  ). 
secondary (State,  engl_chip_detr ) 

create_goals( (  idle(throttlel) , land (pract ) )  ). 

secondary(State,  eng2_chip_detr ) 

member (oil_press(eng2,  X  ),  State  ), 
below_limit (L) ,  status_member (X,L) , 
create_goals ( l  off (eng2 ), land( pract ) ]  ). 

secondary (State,  eng2_chip_detr ) 

member ( oil_temp( eng2,  high).  State  ), 
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create_goals ( (  off (eng2 ), land ( pract ) 1  ). 

secondary( State,  eng2_chip_detr ) 

create_goals ( l  idle (throttle2 ), land ( pract ) 1  ). 

secondary( State,  xmsn_chip_detr ) 

member <oil_temp( xmsn, high) ,  State ) , 
create_goals ( l prepare_f or_fai lure ( xmsn ) , 
land(pos) )  ) . 

secondary( State ,  xmsn_chip_detr ) 

member ( oil_press (xmsn, X  ),  State), 
below_l imi t { L ) ,  status jmember (X,L) , 
create_goals ( I  prepare _f or _f allure { xmsn ) , 
land ( pos ; ]  )  . 

secondary ( State ,  xmsn_chip_detr ) 

create_goals { t  land { pos)]  ). 

changed ( [ erratic, increase , decrease  ) ) . 

below_limit { (none, low] ) . 
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/*<<<<<<<<<<<<<<<<  recommended  operators  >>>>>>>>>>>>>>>>*/ 

/*  The  recommended  facts  gives  the  operator  to  apply  to 
achieve  the  goals  listed.  The  order  in  which  these  facts  are 
listed  is  crutial  to  the  over  all  performance  of  the 
planner.  Those  opeators  that  are  the  most  difficult  to 
satisty  come  before  those  that  are  eaiser.  Operators  are 
also  listed  in  order  of  urgency.  A  given  goal  may  have  more 
than  one  operator  that  is  suitable.  These  operators  are 
ordered  in  the  same  manner  as  above. 

*/ 

recommended (  State,  [ revs (nq2, respond ), revs (ngl, respond ) , 

off(gcnl),ocf(gen2), 
of £ (engl ) , off ( eng2 ) , land ( pract )  ] , 

confirra_dual_eng_failure  ) . 

recommended <  State,  { revs ( rotor , respond ) 3 , 
conf irm_eng2_cailure ) . 

recommended (  State,  { revs ( rotor , respond ) 3 , 
conf irm_engl_:aiiure ) . 

recommended (  State,  [ revs ( rotor , respond ) 3 , 
govl_to_manuai ) . 

recommended (  State,  i revs ( rotor , respond ) 3 , 
gov2_to_manual ) . 

recommended (  State,  [ tor que'xznsn, respond)  3 , 
check_ngl_underspeed )  . 

recomreended(  State,  ( torque (xmsn, respond )) , 
check_ng2_underspeed) . 

recommended (  State,  l torque(engl, respond ) ) , 
conf lrm_nfl_fai lure) . 

recommended (  State,  [ torque ( engl, respond )] , 
check_ngl_overspeed ) . 

recommended(  State,  [ torque (engl, respond )] , 
check_ngl_underspeed ) . 

recommended(  State,  [torque(eng2, respond) ] , 
conf irm_nf 2_failure ) . 

recommended(  State,  ( torque ( eng2, respond )) , 
check_ng2_overspeed ) . 

recommended(  State,  [ torque(eng2, respond) ), 
check_ng2_underspeed ) . 

recommended (  State,  lrevs(ngl, respond) J , 
govl_to_manual ) . 

recommended(  State,  lrevs(nfl, respond) ) , 
govl_to_manual ) . 

recommended(  State,  Irevs(ng2, respond) 1 , 
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gov2_to_manual ) . 

recommended (  State,  (revs(n£2, respond )] , 
gov2_to_manual ) . 

recommended(  State,  l land(auto) ] ,  autorotation). 


recommended(  State,  ( £ailed(eng2 ) ] , 
con£irm_eng2_£ailure ) . 
recommended(  State,  t fa i led ( engl ) ] , 
con £irm_engl_£ai lure ) . 


recommended ( 
recommended ( 
recommended ( 
recommended ( 
recommended ( 
recommended ( 


State , 
State, 
State, 
State, 
State , 
State, 


{ fai led (govl ) J , con £ irm_nf l_£ai lure ) . 
t failed (govl) 1 ,check_ngl_overspeed ) . 

( £alled(govl ) ) ,check_ngl_underspeed ) . 
( failed ( gov2 ) ] ,con£irm_n£2_£ailure ) . 

C  fal led( gov2 ) J ,check_ng2_overspeed ) . 

( failed (gov2 ) 1 ,check_ng2_under speed ) 


recommended (  State, 
recommended (  State, 


t i ft (engl, respond ) J ,govl_to_manual ) . 

( itt(eng2, respond) J ,  gov2_to_manual ) 


recommended (  State, 
recommended (  State, 


( failed(genl) ) ,check_genl_£aiiure ) . 

( £ailed(gen2 ) ),  check_gen2_£ailure ) . 


recommended (  State, 


( e  ngaged ( seas ) ) , 


engage _scas  ) 


recommended (  State, 
recommended (  State, 


(automatic(gov2) ] ,gov2_to_automatic) . 
(automatic (govl) J ,govl_to_automatic) . 


recommended (  State, 
recommended(  State, 


( idle ( throttlel ) 1 , throttle l_idle  ) . 
( Idle ( throttle 2 ) 1 , throttle2_idle  ) . 


recommended (  State 
recommended (  State 
recommended (  State 
recommended(  State 
recommended(  State 
recommended(  State 
recommended (  State 


(off (engl) 1, 
(o££(eng2) J , 

(off (ecu) 1 , 

(of f (genl) ) , 

( off ( gen2 ) ] , 

(of f (rain_rmv) ] , 
(of f (master_arm) J 


engl_of f  ) . 
eng2_o£ f  ) . 
ecu_of £  ) . 
genl_of f  ) . 
gen2_off  ) 
rain_rmv_of f  ) . 
master_arm_of f  ) . 


recommended (  State, 
recommended (  State, 
recommended (  State, 


( land ( pos ) 1 , pos 
( land ( pos ) ) , 

( land ( pos ) 1 , 


land ing_out ranked 
pos_landingl  ) 
pos_landing2  ) 


recommended (  State,  ( land ( pract ) 1 , 

pract_landing_outrankedl 
recommended (  State,  ( land ( pract )] , 


)  . 

pract_landing  ) . 


recommended (  State, 
recommended (  State, 


( land ( normal ) ] , 
( land (slope ) ] , 


norma l_approach  ) . 
slope_landing  ) . 
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recommended ( 
recommended ( 

recommended ( 

recommended ( 


State,  l land (steep) ) ,  steep_approach  ) 

State,  ( land(high_speed) 1 , 
high_speed_approach  ) . 

State,  ( land(raax_weight ) 1 , 
max_weight_landing  ). 

State,  ( land ( si id ing ) J ,  si iding_landing 
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/*<<<<<<<<<<<<<<<<<<<  preconditions  >>>>>>>>>>>>>>>>>>>*/ 


/*  The  preconditions  for  the  application  of  operators 
defined  in  these  facts 
*/ 

precondition  State,  genl_off  ,11). 
precondition  State,  gen2_off  ,  N). 


precondition  State,  engl_off  ,N). 
precondit ion(  State,  eng2_of£  ,11). 


precondition!  State,  check_genl_failure 
ammeter (engl, none ) 3 ) . 


, ( on<  geni ) , 


precondition  State,  check_gen2_failura 
ammecer ( ang2 , none ) 3 ) . 


, [on<gen2 ) , 


precondition!  Stata,  govl_to_manual , 

(automatic(govl) ,  automat ic (gov2 ) , 
tailed(govi) ,  idle ( throttlel ) J ) . 


precondition  Staca,  govl_to_automatic, 

C idle ! thr ottlel } , manual ( govi > ] ) . 


precondition  State,  conf irm_nfl_failure, 

C revs (ngl, erratic) , itt (engl, erratic ) , 
revs (nfl, erratic) , 

torque (engl, erratic ) ,  automat ic (govl ) ) ) . 

precondition  State,  check_ngl_underspeed, 

(revs ( ngl, decrease ) ,revs ( nfl, decrease ) , 
torque(engl, decrease ) ,automatic(govl) 1) . 

precondit ion(  State,  check_ngl_overspeed, 

( revs (ngl, increase ), revs ( nfl, increase ) , 
torque ( engl, increase ) , automatic ( govl ) ) ) . 


precondition  State,  gov2_to_manual , 

(automatic( gov2 ) ,  automat ic( govl ) , 
failed(gov2),  idle ( throttle2 ) ] ) . 

precondition  State,  gov2_to_automat ic, 

( idle ( throttle 2 ) ,manual(gov2) J ) . 

precondition  State,  conf irm_nf 2_failure, 

( revs (ng2, erratic) , itt (eng2, erratic) , 
revs ( nf 2, erratic ), torque ( eng 2, erratic ) , 
automat ic(gov2) 1 ) . 


are 


i 
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precondit ion(  state,  check_ng2_underspeed , 

t  revs (ng2, decrease ) , revs (nf 2, deer ease ) , 
torque ( eng2, deer ease ) , automat lc ( gov2 ) 1 ) . 

precondition  State,  check_ng2_overspeed, 

l revs ( ng2, increase ) , revs ( nf  2, increase ) , 
torque ( eng2, increase ) , automat ic (gov2 ) 1 ) . 

precondit ion(  State,  autorotation,  ( failed(engl) , 
failed ( eng2 ) 3 ) . 

precondit ion<  State,  high_speed_approach, {  £ire(_)j). 

precondition  State,  max_weight_landing, 

{  gross_we ight < heavy ) , 
landing_zone {clear ) 3 ) . 

precondit ion(  State,  3liding_landing,  (power(low), 
landing_zone {clear ) 3  3 . 

precondit ion<  State,  pos_land ina_outranked , 

[ land (auto  )  3  )  . 

orecond i t ion(  State,  pos_iandingl , 
l failed(engl) 3  )  . 

precondition  State,  pos_landing2 , 
lfailed(eng2) ) )  . 

precond it ion(  State,  pract_landing, 

[ land ing_zone (clear ) ] ) . 

precondit ion(  State,  pract_landing_outrankedl, 

( land(pos ) ] ) . 

precondition(  State,  normal_approach, 

{  revs(  rotor,  ok  ),  of£(  master_caut ion  ), 
engaged(  seas  ) , of f ( ecu ) , off ( ra in_rmv) , 
o£f(  master_arm  ),  landing_zone (clear )]) . 

precondition  State,  slope_landlng, 

(  revs(  rotor,  ok  ),  off(  master_caut ion  ), 
engaged(  seas  ),off(  ecu  ),off(  rain_rmv  ), 
off (master_arm  ), 

land ing_zone( slope ),gross_we ight (moderate) 3 ) . 

precondition  State,  con£irm_engl_failure, 

{torque (engl, none ) ,  torque (xmsn, low) ,  revs(ngl,none ) , 
revs ( nfl, none ) ,  oi ljpress ( engl, none ) ,  failed(genl) , 
itt(engl,none ) ,  le£t_yaw,  on ( f uell ) , f ull ( throttlel ) , 
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revs ( rotor, low) J ) . 


precondition  State,  conf irm_eng2_£ailure, 

C torque ( eng 2, none ) ,  torque ( xrasn, low) , revs ( ng2, none ) , 
revs(n£2,none),  oil_press (eng2, none ) ,  failed(gen2 ) , 
itt(eng2,none),  le£t_yaw,  on(£uel2),  f ull ( throttle2 ) , 
revs(rotor, low) 1 ) . 

precondi t ion(  State,  conf irm_dua l_eng_f allure, 

t  oll_press(engl,none) ,  oil_press(eng2,none) , 

revs ( rotor , low) ,  f ull ( thrott lei ) ,  full ( throttle2) , 

on(fuell),  on(fuel2),  torque(engl,none ) , 

torque (eng2, none ) ,  torque ( xmsn, low) ,  revs ( ngl, none ) , 

revs (ng2, none),  revs(n£l,none ) ,  revs (n£2, none ) , 

fa i led ( genl ) ,  fai led (gen2 ) , of f ( seas ),itt(engl, none ) , 

itt (eng2, none ) ,  left_yaw  )). 


precondit ion(  State 
precondition (  State 
precondit ion(  State 
precondition  State 
precondit ion(  State 
precondition  State 


engage_scas, C J  ). 
ecu_of f ,  C  J  )  . 
rain_rmv_of f ,  (  J )  . 
master_arm_o££,  t ) ) 
throttlel_idle,  (  J ) 
throttle2_idle,  t ) ) 
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/*<<<<<<<<<<<<<<<<  deletepostconditions  >>>>>>>>>>>>>>>>*/ 

/*  The  respective  state  elements  to  be  deleted  from  the 
state  description,  for  each  operator  are  defined  in  these 
facts . 

*/ 


deletepostcondit ion (  State,  genl_off,  (on(genl)]  ). 

deletepostcondition(  State,  gen2_off,  (on(gen2)l  ). 

deletepostcondition(  State,  engl_off,  (on(engl)l  ). 

deletepostcondition(  State,  eng2_off,  (on(eng2)l  ). 

deletepostcondition (  State, check_genl_failure, (on(genl) ] ) . 

deletepostcondition(  State,check_gen2_failure, ton (gen 2) J ) . 

deletepostcondit ion(  State,  conf irm_engl_fai lure , 

t  on ( ecu ) J  ) . 

deletepostcondition(  State,  conf irm_eng2_failure, 

( on ( ecu ) ]  ) . 

deletepostcondition<  State,  conf irm_dual_eng_failure, 

t  on( ecu ) ]  ) . 


deletepostcondition (  State, govl_to_manual, 

t automat ic(govl ) ,  idle ( throttlel ) , 
revs(ngl,_),  itt(engl,_), 
revs ( nf 1, _) , revs ( rotor ,_) , 
torque ( engl, _) ] ) . 

deletepostcondit ion (  State,govl_to_automatic, 

(manual (govl ) , manual ( throttlel ) ] ) . 

deletepostcondi t ion(  State, conf irm_nf l_fa i lure,  [ ] ) . 

deletepostcondition (  State, check_ngl_under speed, I } ) . 

deletepostcondit ion(  State, check_ngl_over speed, t 1). 

deletepostcondition (  State, gov2_to_manual , 

(automat ic(gov2 ) , idle ( throttle2 ) , revs ( ng2,_) , 
itt ( eng 2,  _)  ,revs (nf 2,_) , revs ( rotor ,_) , 
torque(eng2,_) ] ) . 

deletepostcondit ion(  State, gov2_to_automatic, 

(manual (go v2 ) , manual ( throttle 2) 1 ) . 
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deletepostcondit ion  ( 

S ta t e, con £ irm_n£2_£a i lure, ( ) ) . 

deletepostcondit ion ( 

State ,check_ng2_underspeed, 11). 

deletepostcondltion( 

State, check_ng2_overspeed, ( J ) . 

deletepostcondit ion ( 

State,  throttlel  idle, 

( full ( throttlel ) J ) . 

deletepostcondit ion ( 

State,  throttle2_idle, 
(£ull(throttle2) )) . 

deletepostcondit ion  ( 

State,  ecu _ off ,  [on(ecu)]). 

de letepostcondi t ion( 

Stace,  engage_scas,  ( of f {seas )  } ) . 

deletepostcondit ion  ( 

State,  rain_rmv_of f ,  ( on{ rain_rmv ) ) ) . 

deietaposecondlt ion< 

State,  macter_arm_of f , 

[on{aBster_arm) j ) . 

deieteposccondition( 

State,  norma i_app roach,  {aititude{_) , 
airspeed (_)]). 

deiacapostcondition< 

Stace,  siope_landinq,  { al t i tude { _) , 

airspeed (  _)  3 ) . 

deletepostcondit ion  ( 

State,  steep_approach,  (altitude(_) , 
airspeed(_) ] ) . 

deletepostcondit ion  ( 

State,  high_speed_approach. 

(altitude (_) ,  airspeed(_) J ) . 

deletepostcondit ion(  State,  raax_weight_landing, 

(altitude (_) ,  airspeed (_)]) . 

deletepostcondit ion(  State,  sliding_landing, 

(altitude (_)  ,  airspeed (_) J ) . 

deletepostcondition(  State,  pract_land lng_outrankedl , 

l  1)  . 

deletepostcondition(  State,  pract_landing, 

(altitude (_) ,  airspeed(_) ] ) . 

deletepostcondition(  State,  pos_landing_outranked, 

I  1)  . 

deletepostcondition(  State,  pos_landingl, 

(altitude (_) ,  airspeed(_) 1 ) . 
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deletepostcondlt Ion (  State,  pos_landing2 , 

[altitude (_) ,  airspeed (_)]) . 

deletepostcondlt ion(  State,  autorotation, 

( f ull ( throttlel ) ,  full ( throttle 2 ) , air speed ( 
altitude(_),  revs(rotor,_) J ) . 
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/*<<<<<<<<<<<<<<<<<  addpos tcondi t ions  >>>>>>>>>>>>>>>>>>*/ 

/*  The  respective  state  elements  to  be  added  to  the  state 
description,  for  each  operator  are  defined  in  these  facts. 

V 


addpostcondition ( 

check_genl 

failure. 

( 

of f (genl) , 

failed(genl) )) 

addpostcondition ( 

check_gen2 

_failure. 

( 

of  f (gen2 ), 

failed(gen2 ) ) ) 

addpostcondition ( 

genl_of f  , 

( 

of f (genl ) 

J)  . 

addpos tcond it ion( 

gen2_of f , 

( 

of f (gen2 ) 

1) . 

add pos tcondi t ion  ( 

engl_of  f , 

( 

off (engl ) 

) )  . 

addpostcondition ( 

eng2_of f , 

( 

off (eng2 ) 

3)  • 

addpostcondition ( 

autorotation. 

( idle ( thrott lei ) ,  idle ( thrott le2 ) , 

air speed ( 0 ) ,  altitude ( 0 ) ,revs (rotor , respond ) , 

land (auto) 1 ) . 

addpostcondition(  conf irm_engl_failure, 

(  off (ecu), failed (engl), revs (ngl, res pond) , 
revs ( nf 1, respond ) ,  revs (rotor , respond ) , 

itt ( engl, respond ) ,  torque ( engl, respond ) , 
torque ( xmsn, respond) ) ) . 

addpos tcond it ion (  conf irm_eng2_failure, 

(  of f (ecu ) , failed (eng 2 ) ,revs (ng2, respond ) , 
revs (nf 2, respond) ,  revs ( rotor , respond ) , 
itt (eng2, res pond ) ,  torque (eng 2, respond ) , 
torque (xmsn, respond) ] ) . 

addpos tcond it ion(  conf irm_dual_eng_failure, 

C  off (ecu), failed (engl), failed (eng2), off (genl) , 
off(gen2),  off(engl),  off(eng2),  revs (ngl, respond) , 
revs (nf 1, respond) ,  re vs (rotor, respond) , 
itt (engl, r espond ) ,  itt (eng2, respond) , 
revs ( ng2, respond ) ,  revs ( nf 2 , respond ) 1) . 


addpostcondition ( govl_to_manual , 
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I  manual (govl ) ,  manual ( throttlel) , 
revs(ngl,ok),  itt(engl,ok) ,  revs(n£l,ok) , 
revs(rotor,ok),  torque (engl, ok ) , 
torque (engl, respond ),  revs ( ngl, respond ) , 
revs (nfl, respond ) , revs (rotor, respond) , 
itt (engl, respond) J ) . 

addpostcondition(govl_to_automatic,  (automatic (govl) 1 ) . 

addpostcondition(conf irm_n£l_£ailure, l revs ( ngl, respond ) , 

revs ( nfl, respond ) ,  failed(govl) , 
torque(engl, respond) J ) . 

addpostcondi t ion (check_ngl_under speed, { revs ( ngl, respond ) , 

revs(nfl, respond) ,  failed(govl) , 
torque (engl, respond ) ] ) . 

addpostcondi t ion ( check_ngl_o vers peed, ( revs ( ngl , respond ) , 

revs ( nfl, respond ) ,  failed(govl) , 
torque ( engl, respond ) ) ) . 

addpostcondit ion ( gov2_to_manual , 

(manual ( go v2 ) ,  manual ( throttle2 ) ,  revs ( ng2 , ok ) , 
i tt (eng2 , ok ) ,revs ( nf 2 , ok ) , revs ( rotor , ok ) , 
torque ( eng 2, ok ) , torque ( eng 2 , respond  )  , 
revs (ng2, respond) ,  revs ( nf 2 , respond ) , 
revs ( rotor , respond ) , i tt ( eng 2, respond ) J ) . 

addpostcondi ti on (gov2_to_automatic,  ( automatic (gov2) ] ) . 


addpostcondi tion(conf irm_nf 2_fai lure, ( revs ( ng2, respond) , 
revs(nf 2, respond) ,  failed(gov2) , 
torque (eng2, respond) ] ) . 

addpostcondit ion ( check_ng2_under speed, ( revs ( ng 2, respond ) , 

revs(nf 2, respond) ,  failed(gov2 ) , 
torque ( eng2, respond ) 1 ) . 

addpostcondition(check_ng2_overspeed, ( revs ( ng2, respond) , 

revs(nf 2, respond) ,  failed ( gov2 ) , 
torque (eng2, respond) J ) . 


addpostcondit ion ( 
addpostcondit ion  ( 
addpostcondition( 
addpostcondi t ion ( 
addpostcondit ion  ( 


throttlel_idle,  l  idle(  throttlel)!). 
throttle 2_idle,  [  idle(  thrott le2 ) ! ) . 
ecu_off,  (off(ecu)l). 
engage_scas ,  ( engaged ( seas ) 1 ) . 
rain_rmv_of f ,  (of f (rain_rmv) ! ) . 
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addpostcondition(  master_arm_of f ,  toff (master_arm) } ) . 


addpostcondition(  norma l_approach, 

C land (normal ) ,  altitude(O),  airspeed ( 0 ) 3 ) 

addpostcondi tion(  slope_landing, 

( land ( slope ) ,  altitude(O),  airspeed ( 0 ) 1 ) . 

addpostcond i t ion(  steep_approach , 

t land (steep) ,  altitude(O),  airspeed ( 0 )]) . 

addpostcond it ion (  high_speed_approach , 

[ land (high_speed ) ,  altitude(O),  airspeed ( 0 ) J ) . 

addpostcondi t ion (  max_we ight_landing, 

{ land(max_weight ) ,  altitude(O),  airspeed ( 0 ) 3 ) . 

addpostcond it  ion (  3 1 id ing_land inq, 

f land (sliding ) ,  altitude(Q),  airspeed { 9 ) 3 ) . 

addpostcond it ion (  oos_land ing_outranked , 

[ land ( pos ) 3 ) . 


addpostcondition(  pos_iandingl , 

{land (pos),  altitude < 0 ) ,  airspeed { 0 )]) . 

addpostcondit ion(  pos_landing2, 

Cland(pos),  altitude(O),  airspeed ( 0 )] ) 

addpostcondit ion(  pract_land ing, 

tland(pract),  altitude(O),  airspeed( 0 ) ] ) . 


addpostcond it  ion (  pract_landing_outrankedl, 

C land (pract ) ) ) . 
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/*<<<<<<<<<<<<<<<<<<<<  PRIORITY  SETS  >>>>>>>>>>>>>>>>>>>>*/ 


/*  These  sets  define  the  relative  priority  among  its 
elements.  If  an  element  of  a  higher  priority  has  been 
asserted  as  a  goal  no  lower  priority  elements  will  be 
asserted . 

*/ 

prior ity_set ( I  failed (engl ) ,  off(engl)l). 

prior ity_set( {  failed (eng2 ) ,  off(eng2)]). 

prior ity_set ( { land ( pos ) ,  land ( pract ) } ) . 

priority_set ( t land<siope ) ,  land ( high_speea ) , 

land (max_weight ) ,  land ( sliding ) ,  land (steep), 
land ( normal ) ) ) . 

or i or ity_set U power ( none ) ,  power (low),  power (decrease ) , 

power ( increase ) 3 ) . 

prior  ity_set:(  l  power  (none  ) ,  power  (low),  power  (ok)  3). 
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/*<<<<<<<<<<<<<<<<<<<<  test  cases  >>>>>>>>>>>>>>>>>>>>*/ 


/* 


testl  normal  state  */ 


testl(Oplist,Goalstate )  problem_solver 

(  (  revs(rotor,ok) ,  £ull(£uel),  engaged ( seas ) ,  on(ecu), 
of f (rain_rmv) ,  of f (master_arm) ,  landing_zone ( clear ) , 
full(throttlel) ,  f ull ( throttle2 ) ,  of f (master_caution) , 
automat ic( govl ) ,  automatic ( gov2 ) ,  on(fuell),  on(fuel2), 
normal ( fuel_press ) ,  torque ( engl, ok ) ,  torque (eng2, ok ) , 
torque (xmsn, ok ) ,  revs (ngl,ok ) ,  revs ( ng2 , ok ) ,  revs ( nf 1 , ok ) , 
revs ( nf 2 , ok ) ,  oil_temp(engl,ok ) ,  oil_temp(eng2,ok) , 
oil_press (engl, ok ) ,  oil_press (eng2,ok ) ,  on(genl)f  on(gen2), 
oil_temp(c_box,ok  ) ,  oi l_press  (c_box,  ok  ) ,  oil_temp(xmsn,  ok  ) , 
oil jpress ( xmsn, ok ) ,  ammeter (genl, ok ) ,  ammeter ( gen2 , ok ) , 
f uel_press (ok ) ,  itt ( engl , ok ) ,  itt (eng2, ok ) , 
oil_press ( hyd_sys_l , ok ) ,  oil  jpress ( hyd_sys_2 , ok ) , 
a irspeed ( 100 ) ,  alt itude ( 1000 )] , 


Oplist,  Goalstate  ).  /*  final  state  and  how  we  got  there  */ 


/*  test2  dual  eng  failure  */ 
test2 ( Oplist f Goalstate )  problem_solver 

(  (  oil_press (engl, none) ,  oil_press(eng2,none) , 

revs (rotor , low) ,  of f (rain_rmv) ,  of f (master_arm) , 

landing_zone(clear ) ,  f ull ( throttlel ) ,  f ull ( throttle2 ) , 

of £ ( master_caution ) ,  automatic ( govl ) ,  automatic(gov2 ) , 

on(fuell),  on(fuel2),  normal ( fuel jpress ) ,  torque(engl,none ) , 
torque (eng2,none ) ,  torque ( xmsn, low) ,  revs ( ngl, none ) , 

revs ( ng2, none ) ,  revs ( nfl, none ) ,  revs ( nf 2, none ) , 

oil_temp( engl, ok ) ,  oil_temp( eng2, ok ) ,  failed(genl) , 

fa i led ( gen2 ) ,  full(fuel),  off(scas),  on(ecu), 

oil_temp(c_box,ok ) ,  oil_press ( c_box, ok ) ,  oil_temp(xmsn, ok ) , 
oi l_press ( xmsn, ok ) ,  ammeter ( genl, none ) , ammeter (gen2, none ) , 
f uel_press ( ok ) ,  itt(engl,none) ,  itt (eng2, none ) , 

oi 1 jpress ( hyd_sys_l, ok ) ,  oil_press ( hyd _sys_2, ok ) , 

airspeed(lOO),  altitude ( 1000 ) ,  left_yaw  J, 

Oplist,  Goalstate  ).  /*  final  state  and  how  we  got  there  */ 


/*  test3  single  eng  failure  */ 

test3(0plist, Goalstate )  problem_solver 

(( oil_press (engl, none ) ,  oil_press (eng2,ok ) ,  revs (rotor , low) , 
of f ( rain_rmv) ,  of f ( master_arm) ,  landingjzone (clear ) , 
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£ull(throttlel) , 
automat ic ( govl ) , 
normal ( f uel_press ) 
torque ( xmsn, low) , 
revs(nfl,none) , 
oil_temp(eng2,ok ) , 
on(ecu),  oil 

oil_temp( xmsn, ok ) , 
ammeter (gen2, ok ) , 
itt (eng2,ok ) , 
oi  l_press  ( hyd_sys_: 
left__yaw  ), 


£ull( throttle 2 ) ,  off (master_caution) 
automat ic ( gov2 ) ,  on(fuell),  on(£uel2) 
torque ( engl, none ) ,  torque ( eng2, ok ) 
revs ( ngl, none ) ,  revs(ng2,ok) 

revs (n£2,ok ) ,  oi l_temp( engl, ok ) 

failed(genl) ,  full(fuel),  o£f(scas) 
_temp(c_box, ok ) ,  oil_press(c_box7ok) 

oil_press (xmsn, ok ) ,  ammeter ( genl, none ) 
£uel_press ( ok ) ,  i tt ( engl, none ) 

oil_press (hyd_sys_l,ok ) 
2, ok),  airspeed ( 100 ) ,  altitude ( 1000 ) 


Oplist,  Goalstate  ) .  /*  final  state  and  how  we  got  there  */ 


/*  test4  single  engl  failure  +  nf2  gov  failure  */ 

test4 (Oplist, Goalstate )  problem_solver 

((oil _press (engl, none ) ,  oi l_press ( eng2 , ok ) ,  revs ( rotor , low) 
of £(rain_rmv) ,  of f (master_arm) ,  landing_zone (clear ) 

f ul 1 ( throttlel ) ,  full ( thrott le2 ) ,  of f ( mas ter_caut ion ) 

automat ic ( govl ) ,  automatic(gov2 ) ,  on(fuell),  on(fuel2) 
normal ( fuel_press ) ,  torque ( engl , none ) ,  torque ( eng2 , errat ic  ) 
torque ( xmsn, low) ,  torque ( xmsn, erratic ) ,  revs ( ngl, none ) 

revs ( ng2 , errat ic ) ,  revs ( nfl , none ) ,  revs ( nf 2 , errat ic ) 

oil_temp( engl, ok ) ,  oil_temp(eng2,ok ) ,  failed(genl) 

full(fuel),  off(scas),  on(ecu),  oi l_temp( c_box,  ok ) 
oil_press (c_box, ok ) ,  oil_temp( xmsn, ok ) ,  oil_press (xmsn,  ok ) 
ammeter (genl, none ) ,  ammeter (gen2, ok ) ,  £uel_press(  ok  ) 
itt( engl, none ) ,  itt(eng2, erratic ) ,  oil_press (hyd_sys_l,ok ) 
oi ljpress ( hyd_sys_2 , ok ) ,  airspeed( 100 ) ,  alt itude ( 1000 ) 
lef t_yaw  ) , 

Oplist,  Goalstate  ).  /*  final  state  and  how  we  got  there  */ 


/ 

/ 

/ 

/ 

/ 


/ 

/ 


/ 

/ 


7 

7 

/ 

/ 

/ 

/ 

/ 

/ 
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